skysight-inc/HackerNews huggingface dataset:
Not really. You get that with per-password salting, but having a single salt for your whole database is not uncommon. Since the main point of salting AFAIK is to ward off rainbow tables, it's better than nothing.

EDIT: As noted in the comments, the way I put this originally was kind of flip and misleading and I apologize for creating confusion. My point was that I've seen a number of places do it that way, so just throwing at at your problems doesn't necessarily fix everything.
No. Most of my conversations revolve around my career, and I'm a system administrator. Bike shedding I had already identified to be a problem. Pedantry like this I'm starting to notice as well.
Why should America wait for other countries to reciprocate? If other countries don't accept American entrepreneurs and America accepts their entrepreneurs, most entrepreneurs will come to America to do business, and only a few will take business elsewhere. Wouldn't that give America an economic advantage?
OUR WORLD AS WELL
I see, but isn't brute-forcing "aecd8c83718c381cpassworda3802..." going to take far, far longer? Even on some huge botnet clusters, I still don't imagine how it could be possible to crack that very quickly.
It's more than terminology.

"We have an Airplay licensing program explicitly to assist companies in creating AirPlay capable products. Apple never said that we would pull the rug out from anyone, we in fact worked with this developer to ensure they update their app and remain on the App Store"

The clear implication there is that Apple had procedures available for getting this to work and RA just ignored them. RA's response directly contradicts this.

P.S. thanks for the unexplained downvotes.
http://bikeshed.org
Yeah, I completely agree with you here. For me, I am a huge advocate for learning as much as we can from film in the production of games. If we look at the way technology is going, in 100 years I think we will see a huge blurring of the lines between games and film, there will be much much more cross-compatible skills and methods.
Start a business with Kickstarter donors as angel group
Wondering whether anyone had heard this idea, or thought about it?

Basic idea is, you pitch on Kickstarter and offer equity as prizes.

Any reason why this might be illegal, or too inherently risky for investors?
Exactly this. They did the same thing with Ten Cent in China, I believe.
Hasil Pertandingan Piala Eropa 2012
Actually, controlling aftermarket parts is crucial to automakers. Add nitrous, void your warranty. Modify chip, void your warranty. Make a cosmetic change, no problem.
Well, car manufacturers have certainly not been very aftermarket-friendly with their center stack over the past decade. It might actually be fairly similar after all:

Want a custom stereo in your new car with a fancy center stack setup with a non-standard-size stereo and possibly even integrated AC/heater controls? You're going to have to jump through a lot of hoops. Want software with more functionality than Apple exposes to developers? There's always jailbreaking...

In neither case has there been a substantial consumer backlash.
Substitute the word "character" with "product" and all these rules seem to have remarkable likeness to designing a successful product/building a successful startup
You explained it very very well. In film it is par for the course to have hundreds of square feet of lighting gear crowded around the subject of the shot just to get that perfect look that the DP and director are going for.
In all seriousness, go download a build of blender that has the GPU renderer built in. It is totally handy for what you are talking about. Hit me up via my email in my profile if you want help getting started, the interface can be a bit non-intuitive.
Bear in mind, however, that reverse engineering is also respected at Apple (or it used to be, a couple years ago). I remember reading a story where Steve Jobs personally visited and tried to buy Dropbox, because they reverse engineered Apple's file system, or something like that.
I agree wholeheartedly. Almost all of the abstractions in WebForms are leaky, and the think that it's abstracting... HTML, isn't so complex that it benefits from being abstracted.

It was a learning process for all of us :)
Even when they do shoot outdoors during the day in films, you have scrims, bounce cards, 12k lights and all manner of things to control the light. Also, DP's try to shoot exteriors during golden hour a few hours after sunrise or before sunset, to get softer and warmer light. If you have to shoot mid day, you try to either use a scrim or you pray for clouds to soften the harsh light.
So, what's so special about this? It's literally nothing more than a resizeable textbox that shows up where you click. Why does this merit my e-mail address?
I'm not sure what to make of this. It's certainly a novel approach to displaying a signup box and they did a great job of implementing it. It works just as well on my Windows desktop as it does my Droid. I would imagine the conversion rate is lower because it requires some reading first, but who knows? With coverage based on that feature alone they probably wont be affected by that. If they weren't getting coverage based on the novelty of that feature then they would probably get the conversion hit.

You might consider testing two versions of the landing page to see which one gets you more email addresses (since that's really what you want).

(And since this submission was apparently just flagged to death you should go ahead with the testing...)
I'm reluctantly siding with Apple on this one. Rogue's response is pretty pathetic. Hijacking audio streams is obviously something Apple might have a problem with.

The hypothesis that it has to do with Apple preparing to bring out a competitive offering is laughable. Airfoil would not have a gram of impact on anything Apple does in this realm.

Rogue conspicuously makes no mention of this part: "Apple asked Rogue Amoeba to update their app to remain in compliance with our terms and conditions."
NPR's Car Talk to end in September
I can attest to this.

There were a few fields of contract work in the 1990s for which a number of companies were always hiring. They clearly didn't have the headcount or growth rate to account for this, and scuttlebutt pretty quickly got around that they were simply chewing through candidates.

Turns out that the base talent pool was rather smaller than they may have presumed, and numerous top talent I was aware of quickly learned to steer clear of them.

Different circumstances might make for different strategies, but in my experience, making an investment in your hires sends a strong positive signal. Yes, firing is occasionally necessary, but IMO it represents a failure on both sides.

Or do this openly and call it "contract to hire". Both sides can call it off with no regrets.
In some cases, it involves calculating the angle and falloff of the original light, and placing extra lights at the right angles to simulate the bounce light.
Of course you can. It's just more computationally expensive.

I realize that it's super unlikely that that's what they did, but that doesn't change the fact that at the moment all we know about their password storage system comes from a badly worded PR piece.
For the project I'm working on, whenever I would bind to a 'click' event (via jQuery.on or a Backbone event hash), I instead just pass in a variable that's set to either 'click' or 'touchend' based on touch support detection done on pageload.

If the element is within a scrollable area there's a little bit of extra logic needed to get everything to work happily (so it doesn't fire the event handler if you stop scrolling with your finger on the element). In that circumstance you'd probably better off grabbing one of the many libraries people have written to take care of this, but if that's not a concern (and it isn't in my case, since the parts of the app that shouldn't have the 300ms delay don't scroll), the advantage of this is that the only logic it requires is the touch detection code.
I'm very surprised to learn that all caps menus were intentional. I thought it was for some other reason - maybe something along the lines of what we at Borland called "egging", i.e. using odd international characters to test for internationalization errors; in other words, maybe it was testing for UI spacing or something.
Twitter Confirms Facebook Integration of Usernames, Hashtags, Photos
Vim: Buffers, Windows, and Tabs
Thanks. I'm no security expert but I couldn't see how it would make a difference.
I don't see why that can't just be stated. Students need somewhere to start from, and there's plenty already that we say "trust us for now, we'll prove it later" - and it's not like the reals actually match anything the student has dealt with, at the corner cases, either...
jQuery popularized the idea of DOM ready (which is DOMContentLoaded to the browser). DOM ready was a big improvement from what we used to do which was waiting for the onload event to fire. It turns out the majority of the stuff we do in JavaScript touches the DOM in some way and you can't read or manipulate the DOM until it's ready. If you have code that doesn't touch the DOM, then sure, you don't have to wait, but those instances are pretty rare in the real world. The big thing to keep in mind is that both CSS and JS block the DOMContentLoaded event. The best thing you can do is keep the CSS and JS that blocks your rendering to a minimum. DOM ready is usually your "perceived performance" so it's best to get there as fast as you can. Instead of trying to get your JavaScript running before on ready, you'd be better off making sure you only have 1 CSS file in your head, that your JavaScript is at the bottom of the page and other standard WPO practices.
So, the code you post requires jQuery, I am assuming, because you don't say. Which means you would need to also include jQuery in the header. Doesn't that seem like a waste? Also if you had jQuery already you could probably writing a queuing system for almost all actions, and not just "important" ones.

You should take a queue from Flickr. I took a look at how they handled this, and I think it's one the best I have seen so far.

http://dailyjs.com/2011/11/28/flickr-async/

The method there could actually be a small amount of code, and wouldn't require that you load jQuery before queuing events.
A single salt for the whole DB is not salting. It is no different than a (custom) hash function, which does not prevent identifying identical passwords, and which does not prevent rainbow table cracking.
No. Simple passwords properly stored and monitored provide the best balance between user experience and security.
Louis Vuitton Car Pendant 86 [Louis vuitton Pendants-123]: replica louis vuitton
replica louis vuitton Louis Vuitton Car Pendant 86 [Louis vuitton Pendants-123] - Replica Louis Vuitton Jewelry We offer high quality Louis Vuitton outlet Jewelry and best Louis Vuitton Jewelry price , cheap Louis Vuitton Jewelry , discount Louis Vuitton Jewelry , and much more! Louis Vuitton Jewelry wholesale Buy from us today for a better deal.
As one of the corporate developers mentioned in the blog post, I had recently independently been getting the feeling that I will not be able to avoid learning git much longer. Some open source packages I've used go as far as only providing links to github without direct downloads. So far, every time I end up on github, I feel completely lost. This must be what getting left behind feels like.
Watch this video of Žižek talking about the "unknown knowns" of ideology to understand why this is such a big deal:

http://www.youtube.com/watch?v=_x0eyNkNpL0
No, you didn't need to explain that. (I hear ya though.)

Yes, they are probably wrong. However, unlike the recent LinkedIn leak, at the moment we know almost nothing about how they were storing passwords. (Although, according to a thread on their forums, they did leave a user's previous and current passwords both simultaneously active -- not a good sign.)

I think that HN didn't used to so readily confuse speculation and facts.
Sure, to help illustrate it further: (don't use SHA1, I'm using it to avoid a discussion of why you wouldn't manually use a salt with bcrypt)

user1: SHA1("salt123"+"puppydog11") = SOME_HASH

user2: SHA1("salt456"+"puppydog11") = SOME_DIFF_HASH

This way, even for the same password, there are different salts, and thus different hashes. No one can run a rainbow attack unless they've generated rainbow tables for that salt (frankly, it would be possible, but useless to generate a rainbow table for a specific salt)
I've had the pleasure of hearing various people from Pixar speak. What impresses me most is the attitude of humility and the love of learning the craft the seem to have. I'm pretty amazed they have managed to maintain that after so many hit movies, the temptation to sit back and feel like you've cracked the enigma of storytelling and have it all figured out must be huge.
> Coincidences to get characters into trouble are great; coincidences to get them out of it are cheating.

Ugh. Please, no. I have no training as a fiction writer but as an audience member I hate this. Nothing is more annoying than tension that comes from a totally implausible sequence of events.
Thank you. HN seems to be subject to tons of vague or mildly misleading titles and I'm getting pretty sick of it.

I wouldn't be bothered as much, but in some places if you get into too many technical details it seems to confound people and then frustrate them. This is kind of silly since I'm still in college and probably one of the least educated coders here.

Seems wrong to be then downvoted for using basic technical knowledge in a place called Hacker News.
Fix Firefox memory consumption problem
Is the warranty the issue here? Isn't it the right to add some functionality to the device? I could see your point if there was an argument between Amoeba and Apple about voiding warranties. But I don't see that being the issue.
This topic is so difficult to analize that I just follow one rule: do what you love and fuck the rest.

If you're doing what you love, you'd feel right. Passions take play here, but there is a catch here: everyone have passion, or have discovered them. So, if you are from the part who have, just follow them.
Looking for graphics designer for android app
"Hijacking audio streams is obviously something Apple might have a problem with."

But it's not Apple's audio stream, it's the user's audio stream. I don't think it's particularly unreasonable to expect that user should be able to decrypt his or her own data (assuming we're talking about data that isn't under DRM; DRM is another issue).
"#9: When you're stuck, make a list of what WOULDN'T happen next. Lots of times the material to get you unstuck will show up."

I use a similar technique when brainstorming, after all the obvious good ideas are exhausted. Think of the worst possible way to solve a problem, and then look nearby for reasonable solutions.
In short, it is BEST to HASH with a salt. Hash with a salt and don't use symmetrical key encryption methods.
> You are doing it wrong.

I'm not doing it at all. Jeans, t-shirts, occasionally a simple two-button suit, if required.

But for a lot of management guys, especially in finance, not being "too far out of place" just doesn't cut it. Somewhere you have to be more conservative than the general fashion, somewhere your tie and lapels have to be the proper width of the season. Never mind the often considerate difference between British, Italian and American fashion. We're talking about business fashion, not artist/actor style. (Never mind the preppy side of all those style guides and blogs.)

I'm not arguing about the timeless cuts, I'm a big fan of the toned down British style. And given the audience of this site, it's a good suggestion. Basically the 80/20 solution of menswear.

But it's really not like you've either got timeless fashion or 70s brown checkered suits with bell bottoms.
You're right you can have both. However I feel pretty strongly that filming dismissals will have a negative impact on company culture. Filming the meeting is humiliating. Current employees are aware of the practice and by not questioning it I think they'd feel complicit in the humiliation of departing co-workers. I think this would degrade the overall atmosphere. Indeed having witnesses is a good idea. And I'm all for employers and employees protecting themselves. However the protection doesn't need to be cruel.
Yup, always hash with a salt (or use an algorithm that does it for you). I added another example below for this guy. And yes, definitely don't use symmetric encryption.
Ante one knows how they got access to the database?
I believe @tptacek will gladly accept your money for this service. As will Cigital.
Come on now, this is a PR release. Most users aren't going to know what "hashed" means, but most people do know what encrypted means. There's nothing to be deduced from their using the word encrypted.
Well, considering they said they compared "hashes" later on, and the hopeful unlikeliness that they were really using symmetric encryption, I feel like it's a pretty sure educated guess and not just a knee-jerk reaction.

edit: I didn't mean to be personally chastizing in my first post, I'm just extremely distraught at the advice I see in these threads, the continued confusion of people and the fact that people with massive userbases either aren't paying attention or are in this ignorant group of "it won't happen to me" people.
Blake -> Peter -> Forbes ?
How to prepare for the coming IT skills revolution
RA did state that they inquired as to licensing it for a software product and were told that there were no plans to make that available. So, they didn't ignore the procedures as much as they ignored the response.

In the end it's Apple's store with Apple's rules. The rules have changed without warning in the past and will likely do so countless times in the future. The tradeoff for this is what is likely one of the most lucrative app stores to date for developers.
You left out an 'un' in front of salted. Or you're wrong. I'm hoping you just mistyped. [edit :)]
What hoops? If the purchaser wants to install a stereo he can choose to do it himself or take the car to a shop that installs stereos. What's happening in this case is, roughly, by analogy, the car manufacturer is trying to exercise control over a shop that is selling stereos that can be installed in the car. Is that overreaching? Would consumers complain if a car manufacturer actually tried to do that? The factory installed stereo better be very good.
Coincidence and implausibility are not necessarily the same thing. Good writing requires you to still make it BELIEVABLE but that doesn't mean it can't have an element of "Talk about bad luck"
Of course, he wasn't always old :) But probably always volatile. Amusing to imagine a senate confirmation hearing with a nominee who's ok with selling babies and LSD (per dpatru's comment).

I haven't read their blog – should I?
Your weakest link is the website with the weakest security. Now they will try your password on your other accounts.
He's always a little over the top.
It's been a while since I took micro, but from what I recall...

In a competitive market, the "actual" (IIRC, the term you want is "accounting") profit doesn't tend toward zero, no. If it falls low enough that more accounting profit could be had elsewhere, firms will move to that elsewhere, supply will be reduced while demand stays the same, and firms will see more accounting profit.
What?

So if I have access to that salt, I generate a new rainbow table and get a huge percent of your users.

The point of salting is to make rainbow tables no more efficient than brute forcing. If each user has a unique salt, there's literally no benefit to generating a rainbow table.
Design With Intent
assuming we're talking about data that isn't under DRM; DRM is another issue

Though AirPlay does work on DRM'ed streams, there's little advantage to using that over simply recording from the audio out from your computer and no advantage over using something like Audio Hijack Pro (another Rogue Amoeba product) or Soundflower to record the audio output of your computer.
Try http://sourceforge.net/projects/console/. It's wonderful.
It has good revenue, but it relies upon 37 signals to promote it. Without their support, revenues could tank. Its a big risk for many potential buyers.
Doom 3 Source code review
Same as roryokane, couldn't play the tracks. Clicking next goes to the next song, but no sound.

EDIT: Also, the pause button thing, here's a screenshot: https://skitch.com/sachitgupta/89s6a/flirttape
RebelMouse Is the Social Media Aggregator We’ve All Been Waiting For
Mentioned this above somewhere, but thought I'd leave it here, too. Try Console. http://sourceforge.net/projects/console/

It makes working in Windows much, much nicer.
This article mostly related to the hardware aspect and primarily from the business (or well-to-do, informed manager) perspective.

I was hoping it would concentrate on the lack of programming skills and possible solutions but it primarily seemed to very mutely classify "that computer/tech stuff" in general as they mention both hardware changes and offshoring software with a passive non-specific brush.

A decent read, even though it holds no value to someone in the industry looking to produce things (such as software or solutions to hardware problems).
I'll probably get downvoted for this, but honest question -

How come that ASUS tweet message was considered so sexist? Using attractive women in advertisements has been around since the dawn of, well, advertisements. And she definitely had a nice rear.

I mean what if the woman was replaced with a strong muscle man and the tweet said "Nice biceps" or "Nice pecs" or something? Hell, say "Nice rear" for a man, why not? Would that also be sexist?

Why are we all so uptight about this stuff?
I don't understand why this keeps happening. When someone designs the user/password model for a website or software do they serious not even consider properly encrypting the passwords? This is not rocket science, implementing a relatively secure password hashing setup takes a minimal amount of work. Hell, adding a salt is an extra field in the database, an extra line of code when creating a user and an extra "+salt" when computing the hash.

I honestly think they spend more time coming up with ridiculous password requirements than actually encrypting the passwords. Possible dialog:

Dev 1: The passwords must have at least one symbol, one number, no dictionary words, and it can't be longer than 15 characters.

Dev 2: That'll be pretty secure, which hashing functions should we use? And should we salt it?

Dev 1: I think MD5 should be secure enough and salts are just overkill.
Good god, this topic is discussed to death and yet there are spreading very inaccurate, insecure crap in this thread. I think everyone needs to stop giving advice and speculating about what is "good" and defer to a security expert or a set of codified best practices. I just don't understand how some people seem to understand salting, hashes or encryption but not enough to understand why unique-per-user salts are important, why asymmetric and symmetric encryption differ or why encryption has nothing to do with this style of password storage. If you don't understand these things, stop giving security advice in these threads.
Seriously. I've worked in places with a relaxed dress code, but no one would be actively hostile towards someone deciding to wear a suit, even with everyone else wearing a t-shirt and jeans.
Your post would be more convincing if you didn't inaccurately refer to this as "encryption".
Split Outlook PST By Size
Split Outlook PST By Size – Download PST splitter software which is apt utility to split Outlook PST by size, date and year. Download demo and get free solution of how to split Outlook PST by size.
Cartown.com
It's assuredly cleverly written, but that doesn't guarantee value or any kind of discernible message.