skysight-inc/HackerNews huggingface dataset:
The Dropbox post on passwords (and their password strength estimation tool) is much better at describing what strong passwords actually are.

http://tech.dropbox.com/?p=165

The advice from LinkedIn like "Don't use a word from the dictionary" and "Substitute numbers for letters that look similar (for example, substitute “0″ for “o” or “3″ for “E”." are security theater.
some of us prefer to see it as native vs web all over again ;)
> I have defined that type of function to jump to the directories of current projects - that should work.

What do you mean? Even if I define a function like so:

function foo; cd /var; end

It shouldn't automatically execute the function and cd into /var.
I'm a user of PwnYouTube (meta converter service), to convert Youtube material to the highest possible MP3 quality.
What I like about your service is that I as a user don't get bugged with quality settings and cropping settings - which raises the question which quality you use.
I'm also curious to know about how Youtube MP3 rips relate (from a fidelity perspective) to "native" high quality MP3s.
HTC Said to Be Shut Out of Windows 8
If they're already violating the license, why would they respect a more restrictive one?
It's interesting from a bit of a game theory standpoint. The optimum outcome might be achieved if Netflix hands over the appliance and the ISP installs and keeps it running at no cost to either party, except for maintenance costs (hardware replacement, etc.) which Netflix bears. Both parties save.

If Netflix wanted to get clever, they could calculate the cost an ISP would likely pay for the bandwidth their users consume, and charge the ISP say 40% of this amount to host the appliance. Netflix saves 100% of its third party CDN bandwidth costs for that ISP and the ISP saves 60% of their peering bandwidth costs.

If the ISP wanted to get clever, they could calculate the bandwidth that Netflix is paying a third party CDN for the traffic consumed, and offer to host the appliance for 40% of this amount. The ISP saves 100% of its peering bandwidth costs for Netflix traffic and Netflix saves 60% of their CDN cost.

What's likely to happen is a bit of cat and mouse over the costs. The ISP peering is likely a lot cheaper than Netflix's CDN costs, so this could work out as:

Netflix CDN cost
- ISP peering cost
----------------
= Cost to Netflix

This is all pure speculation with made-up percentages, of course.
Ask HN: Beta launch of DIY Mobile Website service. Looking for feedback.
Hi,

We just launched the beta of our DIY mobile website development tool. The service is called Jinnsite and the beta can be accessed at the following URL:

http://jinnsite.com/signup?beta

(After you sign up, the tool can be accessed by logging in at http://jinnsite.com/login or directly at http://sitebuilder.jinnsite.com)

The service was designed primarily for individuals (business owners) looking to create mobile-optimized websites by allowing them to create pre-defined pages (About Us, Contact Us, Photos, Videos, etc.) that they can then customize. The service is completely self-hosted so a mobile website can be up and running in minutes. (The user creates a unique site name for the site which is then available at http://<site-name>.jinnsite.net)

While the tool is designed to be easy enough for the novice to use, it also has advanced features to make it powerful enough to be useful to both designers and developers. Some of the advanced features include the ability to include both site-wide and page-level css and javascript, custom headers and footers, domain aliasing, website redirection, etc.

From a tech perspective, the service was built using GWT/SmartGWT so it's 100% AJAX-based and should run on most modern browsers.

I would greatly appreciate feedback regarding any of the following aspects of the service:
- the aesthetics of the tool
- user-friendliness / how intuitive it is to use and navigate
- the generated mobile-optimized output
- essential missing features
- nice to haves
- your judgement of the usefulness of the service to business owners, web designers, developers, etc.

Thank you!

Some additional notes regarding the beta:

- Jinnsite was developed with Google Chrome as the primary browser. It should work on the latest versions of Safari, Firefox and IE, however these aren't as well tested.

- On Firefox, there is a known issue of the FileManager and/or the Preview emulator will not appear full size. A fix is being worked on.

- The FileManager currently allows only one file to be uploaded at a time. An update to allow multiple uploads is being worked on.

- The beta is currently limited only to 2 sites.

- There's very little documentation so far, but when prompted for information, hovering over a field will generally provide a hint.

- The emulator has 2 modes: Live and Preview. It's set to Preview by default which will show every page created whether it's published or not. Live mode is what the public sees and only shows published pages.
Try By applying heat to Fraunhofer’s zeolite as it comes into contact with water, a chemical reaction adsorbs the water and emits heat.
Here are some promo codes, please try it out:

TW7XME4JH6RN

NWWTRHHNMYPT

HKXELLNFFAJM

JY9WLFTR9Y7T

J4XTAFW9MA6K

4HEL349WWPKH

MLNKFM46KAXX

3AL9FJ7LWFW6

AH43J9KA6ERN

FH4RFWXMMW76
Don't be reckless with other people's hearts
I'm not worried, mine is "Social"
Flame’s “god mode cheat code” wielded to hijack Windows 7, Server 2008
Trapping flying qubits in a crystal (and getting them back out)
Reverse kickstarter campaign
Looks quite good. Very similar to AS3, although it has the type inference of Scala. Nice. Either way something like this needs to exist to produce more robust code when creating large projects in Javascript. Google did this in using Java, but Java is overly restrictive. Being able to mix static (to a compilers checks + self-documentation) & dynamic (e.g. write parsing code more easily) typing is the future. This either/or approach is antithesis of what's good in CS.
Wait till it gets more publicity.
What neighborhood should my nyc startup be in?
what would you consider cool, yucky, or medium :
- flatiron & chelsea
- tribeca
- soho
- penn station area
- empire state building
- columbia u area
- DUMBO
- somewhere else
You could try mine out, I put a lot of love into it.

http://itunes.apple.com/us/app/totally-editable-calculator/i...

Here are some vouchers:

NLXEH6NE7W43

XL6AF63J7K9P

MNJKYR3YAN9M

3ARXXHX3HMYN

6WXJA97FL9LK
Carnegie Mellon SCS grads are tops in salary, says nerdwallet
they're "web scale"
FWIW I included scrypt :)

I personally agree that "Use bcrypt." should become "Use scrypt." soon. My main gripe is that there is far less library support for it, at least for now.
It's a footprint issue, not latency. A 94k jQuery file comes at a price and 99% of that codebase never gets hit for an application like this.
Both Mozilla and Webkit implemented different audio (Audio Data/Web Audio) APIs -- wonder what BlackBerry Dev Alpha uses if any.. needs a better 'not supported' message
They actually moved to double-sized Delete (and Escape) key on their more recent models. I love it, much easier to hit.

http://www.zdnet.co.uk/i/z5/rv/2011/04/thinkpad_x220_2.jpg
Ask PG: What steps would you advise a company to take after leaking passwords?
If one of the YC companies leaked half of their user's hashed passwords and immediately asked you for your advice on what to do, what would it be? What if they had low security standards?
Would it change if the company was bigger? (even public?)
From Andy Ihnatko's blog:

But — umm — the release date is only, like, two or three weeks away.

Two or three weeks away would fine. Two or three months would be okay too. GoT season 1 finished airing in June 2011, and didn't come until out on DVD until March 2012.
Thanks! This is considerably smaller than I expected it to be as well (7KiB minified) which is an acceptable size to chuck into our site.
Looks great. A few points:

- They used new imagery from planes to do this, not the existing streetview imagery - I guess that means optical matching of the kind needed to do this (make a model from streetview imagery) is still a ways off.

- 3d maps has been done like this already (by bing and others), though this looks a better resolution.

- As someone who works with city spaces - can I use the 3d data? How can I download it or who do I have to pay?
As a landlord my lease agreement is only 3 pages, and I have always reviewed it with tenants before I allow them to sign it. I review every clause with them and have them initial every page. If they have questions or objections we sometimes modify clauses; we cross out the standard language and write in the new agreement and we both initial the change. It only takes a few extra minutes to review the entire agreement, and I wouldn't want a tenant to sign something that I know they haven't read.
Meet the 9 startup grads from the Portland Seed Fund
What steps do they take to prevent me from uploading bogus documents?
> So would that be one AppleTV for each of my 4 TVs?

Yes, 1/tv.

> How does that work when you have people in different rooms wanting to watch stuff?

Works fine.

> Does AppleTV have my local news available in real time?

Not that I see (I read my news due to TV news being overly edited and selective), but your digital TV jack does, and it will look better than the compressed version does that goes through your cable box. Antenna costs $11.

Roku, a similar product (does everything the Apple one does except Airplay and iTunes Store), http://www.roku.com/ DOES have local news.

Another way to get video news: you could take any iOS device and download one of the apps that has local news channels/radio and use the airplay functionality to stream it to the TV from the device.

Here is mine, for instance:
http://www.11alive.com/news/mobile/default.aspx

If I had it installed that was.
I was expecting someone to mention his stance against modern tech and ebooks. But I like it better this way, this is a good memorial and nostalgia thread, fit for an author whose writing style was very nostalgic.
New Azure IaaS offering to compete head on with AWS
It does for me

> echo test
test
> history
...
6730 echo test
6731 history
You should have a compare with button, and when you click the button the mouse cursor changes, and then clicking a tree node will set it as the "compare to" node.
Pricing Subscription Plans Correctly
Most of the large CDN's already deliver straight into Comcast's network. Last I heard Netflix was already paying Level3 to do this. Xfinity doesn't have a magic pipe, all the content and deliver is internal to the Comcast network so its its own "CDN".
He always looks like that, it's great :) You should see him demoing the iPhone version of his engine: https://www.youtube.com/watch?v=keu4GiTGQ6M
How a Seemingly Well-Planned Server Move Crashed, Burned and Rose from the Ashes
Interview Q: Correcting Code to print exactly 20 dashes
The US Census now has an API
Makes me wonder how long until Netflix looks at doing managed services for video delivery along the lines of Amazon's AWS services.
correct horse battery staple.
Homeless and Overweight: Obesity Is the New Malnutrition
If you're storing passwords as MD5/SHA hashes, how difficult is it be to switch over to bcrypt? I've never had to do this, but I would imagine it would be somewhat trivial. With all of the password leaks that have happened over the past few years, I'd imagine a good amount of developers are aware that storing passwords as MD5/SHA hashes is somewhat risky, so I can't understand why big websites (LinkedIn) are still doing it.
The usual concern with scrypt is that it has less research behind it. The bcrypt hash function has gone through over twelve years of attempts without being broken in the cryptographic sense. The scrypt hash has only around three years of the same.

I would expect that within 5-10 years, scrypt will be the normal suggestion. It really is much better on the fundamentals, so much so that some experts recommend it even in spite of its relative newness. For the moment, though, there are arguments to be made either way.
Your Company Should Engage in Open Source
Google Maps has had 3D maps for a while now, they introduced the feature into Google Earth first. I think the point is more detailed 3D maps.
Also: "adsorbs."

EDIT: upon further research, I find that "adsorption" is actually also a thing, but it appears that here they meant the traditional absorption. Adsorbtion definitely isn't a thing. Also it sounds like a baby trying to say "abortion," which is weird.

What possesses people to give things such similar names? And while we're at it, mathematicians: stop using variables that rhyme. Bs, Cs, Ds, Es, Ps, Zs, it makes my head hurt. Would it kill you to chuck an H or a Q in there? M and N, now thats just purely vindictive. How am I supposed to cope with that?

After writing this comment I think the spelling part of my brain is now fried forever. And to think I've been walking around merrily saying "absorbsion" all these years...
You are going to have a hard time finding a professional cryptographer who will look at scrypt and say that it's risky. These are KDFs, not message authentication codes; they aren't risky constructions.

If you have no other choice but to iterate SHA1 many thousands of times, that's still better than what most apps do, and in the grand scheme of things almost "ok".

scrypt is fine. If you have a library that supports it, go ahead and use it.
Let me know if you find out anything about this. Seems a strong technology!
I'm getting tired of Vivek Wadhwa and his elitist crap... he seems to think that if you didn't attend an Ivy League university that you are some inferior class of human who obviously cannot do anything on your own, much less do anything right.

I'm sure Vivek is a smart guy, but he's way too much of an apologist for academia. Like, does anybody else really believe that getting an MBA is the only way to learn the skills he thinks Zuckerberg was lacking?

And who's to say that Zuck was wrong to wear a hoodie to the IPO roadshow meetings? Is there any evidence that that had anything to do with, well, anything?!???
I think Comcast would be pretty opposed to let a competing product into their not-for-sale DC space. The real benefit here is that it saves ISPs on peering charges. Comcast, AFAIK, does a lot of their own peering and has financial motivations to NOT let Netflix into their DCs (onDemand.)

We will see how this plays into the me neutrality battle...
You can donate to get access to the closed beta - https://www.pathofexile.com/purchase
In San Francisco, the Rent Board places additional obligations on the landlord and declares random things legal and enforceable or not legal and not enforceable. (For instance, a recent example: if there are multiple tenants in the apartment and their rooms are the same, they may not split the rent unequally. it must be split proportionally. so decreeth the rent board.)

The SFAA lease contains things that are... battle-tested.

If you're a tenant, it's not your problem, but if you're a landlord, you probably don't want to be one of those guys who ends up with a tenant that's impossible to get rid of, stays in the apartment forever, and pays half of what you could get if you could legally rent the apartment to someone else (which you can't).
Can you draw the tree with the circles vertically staggered instead of directly adjacent, so the circles are vertically ordered by time?

http://3.bp.blogspot.com/_aHXMSfhY_hY/TFxP-Eoc3rI/AAAAAAAAAH... is an example of similar data.

You could have multiple panes/columns of data, one for the graphical tree, one for the date for each node, one for the username for each node, and one for a node comment.
Hopefully they can at least get it on Google Earth soon.
Carmack's been pushing companies like this for nearly two decades. In particular, he has been a significant force in the evolution of the video card industry. The hardware companies know and respect him. If anyone can do it, he can.
Here is the original file...
http://filevelocity.com/ixhk76jz07m5/SHA1.txt_1.rar
Well based on what I've seen from Google so far it looks like what C3 (whom Apple acquired) has had for a while now. So to be honest it is Google catching up in the 3D space.

And clearly Google is rattled as all of this comes just days before Apple is set to announce their products. I guess losing a significant amount of traffic (all iOS users) will do that to you.

Either way it will be nice for Google to have some honest competition.
There's still an unbelievable amount of ignorance out there about how to properly store hashed passwords. There are countless articles explaining that you need to hash the passwords, and telling you how to use md5("salt" + password), and then the blog comments are full of helpful people saying that you should use SHA256, or "no u also gots to add pepper", or exhorting the author to use a large unique salt from /dev/random (not /dev/urandom, it's not random enough) and then encrypt the salts in the database with 2048-bit RSA. I sometimes google around for these articles when I want some morbid fascination -- it's the intellectual equivalent of those YouTube videos where one car crashes into another, and then a third car crashes into the wreckage, and then another car tries to ramp over it and fails, and then everything explodes, and then the people staggering out of the destroyed cars start shouting bad advice about hash functions.
SRP also has tunable work-factor knobs, although they aren't as explicit as the ones in bcrypt, scrypt, or PBKDF2. But I'd strongly recommend against re-implementing SRP, since it's treacherous to get right.
Parent should be captured for posterity:

2000 - "Run this on a phone? You're crazy"
2012 - "Run this on a desktop? Insane!"
You Have a Passion For Buy Treadmill
Learn more about how to buy treadmill machines for an improved workout.
IMHO the response here is a much more accurate description:

http://siberianfruit.com/post/24290966995/startup-ceos-stop-...
"I still hate the way the control panel apps are organized, and their weird layout in Windows Vista/7. I have gotten used to it, but I still like the old way better."

GOD THIS. I still have to visually scan for a good 10-20 seconds to find what I want. I'm not sure why XP was easier, maybe because the fonts were smaller with more focus on the icons, plus less of them.
Pretty sure he's referring to Node.js. So their technical skillset would be building servers and modules with Node.js.
This looks extremely useful - we have several production projects which I'd like to use it on. Thanks for making!
Reading the paper, it appears that there is, indeed, a statistical & effective difference between the coffee/caffeine drinking set and the non-drinking set.

It's also worth noting that these trials were targeted at senior citizens.

It appears they did check vs. aging effects.

However, there are limitations:

We also did not ask participants when their last caffeine intake was prior to coming in for the initial visit/blood sample. As well, we did not ask subjects about their long-term caffeine/coffee intake habits, although it is likely that subjects with high plasma caffeine levels are habitual/moderate coffee drinkers. Additionally, complete data on ApoE status, education level, ethnicity, dietary habits, and lifestyle choices were not available for all study participants, so none of these can presently be eliminated as contributory to the results observed. Finally, the follow-up time of 2–4 years was relatively short for establishing causality and reverse causation (i.e., subjects with poorer cognitive performance may have reduced caffeine/coffee intake) is
possible.

Essentially, they sampled twice and compared cognitive capabilities. However, there appears to be a existing body of knowledge indicating there is a strong linkage.

http://health.usf.edu/nocms/publicaffairs/now/pdfs/JAD111781...
Cool, does it use Web 2.0 and have an API?
You can't have an "unknown" salt

A salt protects you against rainbow tables of precomputed hashes of known words. It's still possible to just try all possible inputs and check the resulting hash against the list - and on GPUs it can actually be faster than reading rainbow tables from a disk.

Remember you don't need the original password, just any string that hashes to the same value. The one thing a salt does give you is that you can't crack a single passwd and then check for all other entries with the same hash = users with the same passwd.

But if you use a weak hashing function (sha-1 isn't state of the art) it may be that collisions, with different shorter keys producing the same output, are more likely than you would expect from the number of bits.
Brand Control Within An API Ecosystem: Twitter Edition
Multiplayer open source online chess written in scala with akka and play2
Does Alzheimer's run in your family?

My mom drinks at least 3 big cups of tea daily. There's no way she doesn't have Alzheimer's or some other form of dementia. Although her mother had Alzheimer's also, so maybe caffeine isn't enough to overpower genetics.

I wonder if tea has the same effect as coffee in this case. They both have caffeine.
In the context of air travel, are layovers different to stopovers?
Facebook's Horrible IPO In Context
> retains heat indefinitely

What are the physics behind that, because it sounds like it violates the laws of thermodynamics.
First, I do not advocate anything here. I asked a question.

Second, working with a large string of bits is the same as recursive hashing only if you can pre-compute some small intermediate state of the hash function for that string independently from the password you're trying to guess. If you can't, you would have to work with the entire string for every new password tried.
Even if this is a completely trusted and secure site, why would you not use SSL for something like this?

Transport layer security is a serious issue, especially for people prone to password reuse.
Well instead of seeing that from me, this link may help perhaps -
http://chiproject.googlecode.com/files/cpb2E20062E92E772.pdf

Survey results of 3000 mmo gamers on what motivates them, Nick Yee.
No, just a bunch at the top and at the bottom.
Just 1570 out of the 6 million. (I did:
grep 'c3d.....$' SHA1.txt |wc -l)

It's not clear to me how the file was sorted. Anyone have any ideas?
What LinkedIn Should Have Done with Your Passwords
I used to hear some controversy with regards to "stretching." The argument back in the day was, "it's partially security through obscurity, but the danger is that there isn't research to prove that a hash of a hash is cryptographically strong."

So is there research that proves that hashing a hash of a hash of a hash (x100000) doesn't result in a smaller range of values than a single hash for SHA algorithms? Is there no such convergence?
Anybody know of a decent library for numeric up/down spinners?Some browsers do them automatically, but not all.
What do You think is the Future of Computing Technology?
Experts have been telling us about how we'll soon 'approach the limits of' silicon's 'usefulness in computing' for years. Where are we now, and what do YOU think is "The Future of Computing Technology"?
Virtual Reality is really the only thing I've been looking forward to in gaming. Once this becomes a reality, I will be genuinely excited about it again.
I get the business justification for using PhoneGap, but it doesn't change the fact that you're still half-assing it. Half-assing something with good reason is still half-assing, and the experience is still expectedly sub-par.
Putting people's personal details on the open web, giving anyone access, including malicious hackers... This design used by LinkedIn, as well as Facebook, was a bad idea from the beginning. Don't think they are not aware of the risks. How much spam and other annoyances do people get as a result? These companies are killing privacy just to make a quick buck. Maybe they'll be sued.

Direct link to SHA1 file on mediafire (117MB) to avoid javascript, captchas, popups, etc.

http://205.196.120.123/c2o80hrlhteg/n307hutksjstow3/SHA1.txt...