skysight-inc/HackerNews huggingface dataset:
Android Application Development Company 
Synchronous is leading mobile application development company in India. Hire our dedicated Mobile Application Developers for iPhone app development, Windows Mobile development, BlackBerry development.

http://www.synchronoussoft.com/android-mobile-application-development.html
If it turns out that LinkedIn passwords have leaked...
I don't believe that's an option for the author as he's known as "fish" around the web. :)

http://ridiculousfish.com/blog/about.html
There are kids who want to build rockets, write plays and create art. Then there are kids who want to get jobs in IBM and HP.

I think we ought to give both these kids an equal opportunity to get what they want. It's wrong to assume that we all want to create; some of us are happy handling the running and the finances of someone else's creation.
Not sure why this is a great thing.

Yes it has to do that to some regard but it can not be forced to and we still hold democratic control over the most importend of these things. Joining the EU would be spitting on the democratic system that Switzerland has built up over the last 200+ years.
There are about 2^(6 billion) subgroups of humanity. The NYT consistently chooses a small subset of those subgroups to focus on, and to give moral consideration to.

The particular grouping chosen by the NYT is just an arbitrary moral choice to privilege the {race == black} subgroup over (for example) the {SSN % 7 == 2} subgroup.
Database is available here https://disk.yandex.net/disk/public/?hash=pCAcIfV7wxXCL/YPhO...

(Source: twitter, haven't looked at it myself)
Valley Vets Launch $10M Savannah Fund, Sub-Saharan Africa’s First Accelerator
Other sources are starting to report this as well:

http://blogs.computerworlduk.com/unscrewing-security/2012/06...

http://thenextweb.com/socialmedia/2012/06/06/bad-day-for-lin...
I wonder how many LinkedIn users use the same passwords for all their accounts. The article talks about identity theft and "confidential contacts" but I think the real danger is that people tend to use the same password everywhere. It's their other accounts that might have real value.

EDIT - As I think about it, e-mail accounts would be especially valuable as most of your other sites could be compromised using the "recover my password via e-mail" feature if the hacker could read the resulting mail.
Absurd (adjective):

1) ridiculously unreasonable, unsound, or incongruous

2) having no rational or orderly relationship to human life

This title definitely doesn't conform to the second definition, since even McDougall, the author of "Born to Run" believes that sport has been a fundamental part of human life throughout history.

While I appreciate the content of the article, the logic: "since human's aren't physically the best at x, competing in x is absurd" is nonsense.

Also, keep in mind that very few human sports are purely physical accomplishments. Almost every competition involves a significant amount of skill. Especially the popular sports (Soccer (Football), Basketball, Baseball, etc.) - The best fastest athlete in the world is not the best soccer player. Michael Jordan was not known for his physical superiority, but for his skills. I would like to see a team of any of these physically superior animals beat a human at any of these sports.
The forum they are talking about apparently (found using google)

http://forum.insidepro.com/viewtopic.php?p=96122&sid=133...
I must be crazy
whats so open about facebook?
Study Finds Female-Name Chat Users Get 25 Times More Malicious Messages
I'd feel entitled to drive a Rolls Royce if someone offered me one. Which is what happens with P2P: users offering others copies of stuff. There's no stealing except in some people's minds.
It gives me great joy every time a new command-line-related project is released (or, as in this case, gets a major update). I will dedicate a few hours of my weekend to take this for a thorough spin!
OP here: All advice is welcome and will be listened to, that's what makes this place great :)
Why not? They get paying customers, I'm sure they like it.
> - With a computer of 8,000 NOK (~ 1400 USD), you can do a few hundred million attempts per second.

Are you kidding me? LinkedIn stored their passwords using (salted) SHA1 using no iterations? Jesus.
I think the OP in that thread is a mix of rose coloured glasses and sour grapes (sour grape coloured glasses?). The rebuffs are mostly of the "D3 does just what D2 did despite what you said!" variety. About the only thing that I felt was pretty valid was the invasiveness of the story, partly through the fluff conversations of hirelings but mainly through all the boss cutscenes. If the cutscenes didn't play after the first time you'd seen them I'd be a lot happier. At the same time I like the story and it's one of the things I've enjoyed most in just about all of Blizzard's games, this being no exception.

(While I like the fact I can find things to improve my character on the auction house, the fact that I need to because I find a very small number of upgrades makes me sad.)
no, but the issue is essentially the same as ipv4 at that point
> The new system will run concurrently with the old for the next few years

Greatest bit of classic British understatement I've ever read, hands down.

(I wonder if it was intentional?)
The Hacker News effect seems to have taken the forums off-line. If you need a quick DDOS and don't have a botnet handy, just post the link here!
the fixed base fee of Braintree (with vault + recurring option) is ~30% higher than the Recurly + WireCard fees. If Braintree will have the same pricing for intl as they currently have for US...
And anecdotally Tesla had devised a laser as well, so it remains contemporary!
"Founders who are thinking of selling" is a clue that it's after YC has invested. But obviously it's no big secret since he's posting it on a public forum.
You're confusing GEMA and GEZ. The GEMA is not related to public TV and is (practically) only concerned with music.

The GEZ-issue is a completely separate topic. It's about whether we want an independent, not private or state-controlled broadcasting organization. The GEZ-Gebühr is like a special tax to pay for that. There's quite a bit wrong there as well, but alas, that's a different discussion.
[0-9a-z] - base 36 is far from shortest shortener

縮.jp - this one uses utf8 characters and that means their urls won't break 6 characters length for a long long time
5 Useful Lies to Tell User Research Participants
Then he mentions booing him at an event at the bottom. Friends seems to be loosely meant.
Completely off topic and doesn't belong here but since we're already talking about his hooldie, the asymmetry of his hood cord REALLY REALLY bugs me :(
I tried fish a few years ago, but stopped for some reason that I can't remember. I will try again, and will either keep using it, or will remember why I stopped in the first place.
Ladies Learning Code Team Aims to Fix Programmer Education - One City at a Time
Do you know your enemy?   
IT security - what is going on? Register and read a free article. http://pentestmag.com/the-state-of-information-security-by-billy-stanley-2/
I've just downloaded the database linked and it only contains the hashed passwords, not the account usernames / e-mail addresses.

I wonder if someone has the account details to match up otherwise you've no idea which password belongs to who, and you'd hope that LinkedIn would have lockout functionality.
Me. Admittedly, it's stupid as hell, but has generally been too much of a pain to do anything else (for things outside of banking, email). I've started to get serious about KeePass lately, but I bet a significant percentage of users take the lazy approach.
The State of Info-Sec. Register and read
1:

a. Superb readline colouring. Nonexistent commands are shown in red, commands that exist and are on PATH in green. Unclosed string literals become obvious.

b. A history search that is orders of magnitude better that Ctrl-r in Bash. (Though oh-my-zsh has the history-substring-search plugin which provides this functionality.)

c. Features work out of the box, fish helps you avoid managing a .zshrc equivalent file.

d. Tab completion offers hints. If I type l<tab><tab>, I get:

leaftoppm (Convert Interleaf image format to a portable anymap)
less (Opposite of more)
lessecho (Expand metacharacters)
lessfile ("input preprocessor" for less.)
lesskey (Specify key bindings for less)
lesspipe ("input preprocessor" for less.)
lexgrog (Parse header information in man pages)

(These summaries are the first lines of the man pages.)

2: I've only seen it crash on me once, which matches my experience with zsh. YMMV.

I used fish exclusively for a number of years, but eventually moved back to something sh-compatible. Too many wrapper scripts assume this.
I miss the days where wget/curl worked to download files from the web.
Psychedelic Drug Research And The Data Mining Revolution
What Dark Souls Is Really All About
I promise to tweet just once a week.
I've had a love affair with the x200's for the last few years, x200, x220, and the x230. They are all very competent machines. I'm currently using a x200 with an SSD running linux as my primary machine.
In Defense of School Testing
Microsoft has sold over 600 million Windows 7 licenses
To expand on that, to store passwords don't just use salt+sha1, or try to do your own nested sha1, just use bcrypt: http://en.wikipedia.org/wiki/Bcrypt
Richard Feynman's FBI Files
Agreed. That seems rather useless. How would that happen anyway? The usernames stored in a different database/table from the hashes?
Might also be the fact it's all over twitter.
That's an L
I can't have been the only one to have set up a megahal IRC bot back in the day and had some fun with online bozos trying to hit on it...
https://www.dropbox.com/s/dsiuavbbzt8cy7g/forum.insidepro.co...

A saved copy of my local cache...
just use a couple of shitty passwords for sites you don't care about, and remember the other ones.

E.g. my hacker news account would probably be relatively unproblematic to compromise. If that were to happen, I'd just make a new one though.
They might need help cracking the hashes, keeping the usernames behind for their own exploits.
Does it have Etherpad support?
Full disclosure: I reuse passwords on "low-value" accounts too ... I am NOT innocent either.
Where's the bash_profile or bashrc equivalent?
Do you already have a side project that is generating revenue?

I'm sure he'll chime in, but Patrick was making more from BCC than he was from his job by the time he quit. http://diycomputerscience.com/blog/post/2011/07/01/create-a-...

In all seriousness, good luck!
I generally use the same password for what I feel are non-critical sites like LinkedIn, twitter and Facebook. Another password for testing new services/apps etc. As a rule any site that may contain my credit card data or sensitive information I use a separate password. I feel this is the best compromise to having complex passwords for each account.
I seem to recall that patio11 built BCC up in his spare time before making the leap. In other words, grab the next vine before you let go of the last one...
I guess I could make some lengthy tests. But I'm French and you know ... baguette (which, to stay on topic, contains lots of salt).
Well I watched it at a friends who had it copied on his DVR. Does that make me a pirate? I was given a copy by another friend who did copy if off a DVR. I do have the blu-ray version of season one as well.

I will be watching season two without ever paying for HBO, again I am watching it via a DVR. How is my watching it on someone's DVR not the same as downloading it and watching it? In neither case did I pay for it, someone else did in both.

The true issue is that HBO sees more money at risk than they see to gain.
Does anyone know what encryption scheme LinkedIn uses?
I find things that work for every meal and try new recipes. Bread tastes great but I avoid it because if I eat it then I will pay a heavy price. Try the primal blueprint for 60 days and see what happens. I noticed a huge change in 24 hours but my results are not typical.
Your browser must not support the <sarcasm> tag.
Having to type in my Apple password on iOS once every few hours inevitably means I have to use something memorizable and quick to type. There are certain trade-offs with different passwords.
Scraping with jQuery and node.js
360 degree military simulator - the future of gaming?
Have you tried PayU.in? They offer card vault services and assist merchants in getting PCI DSS compliant. they are quite good.
Those just look like hashes - are there usernames / salts somewhere? They do indeed seem to be salted.
... but still, a head wag at LinkedIn for using weak hashing, which I'm guessing means MD5.
>I’m going to make, market, and hustle my iPhone apps like my life depends on it

Why can't I find a link or description to them anywhere in your post?

I’m the breadwinner with a wife and daughter to support,
My wife is due to have our second child in 8 weeks,
We’re currently building a house, and the builder’s bills will soon arrive

I may be the only person to say it, but I don't think quitting your day job at this time is a good idea.
Can we please start using BrowserID or some other standard so we can secure that one provider and do away with all this? I'd like it if we could authenticate with Google using 2-factor authentication and be less worried about my password getting hacked.
Ask HN: Anonymous posts not showing up?
I've created 2 anonymous posts in the past couple days (ask hn), and neither have shown up on the first 5 pages (didn't check past that). Have I done something wrong by trying to remain anonymous in these posts? When you submit an Ask HN post, how does it make its way to the first page?
I'm not ruling out giant marauding space worms that get attracted to the CO2 enriched atmosphere and end up breaking down the entire crust into sterile lumps no bigger than a tortoise, before then leaving for fresh new planets to scour of all life. Not over that sort of timescale anyway. Over that sort of timescale, 'probably' is all we've really got.
If you run chsh and get error "/usr/local/bin/fish: non-standard shell" simply add /usr/local/bin/fish to /etc/shells. Just to save you a Google search :)
Projectors + Robots = The Future
Better still, use scrypt. HN's very own @cperciva wrote it.

http://www.tarsnap.com/scrypt.html

It requires a lot more memory to brute-force it, thereby defeating any speed gains from parallelism.
Eurovision 2012 graph visualisation
Best of luck! I love the start-up life even though I've seen success and failure ... at least it isn't boring.
The sled dog one was covered in the original article, so I didn't repeat it here. ("Huskies can trot up to 100 kilometers in Arctic conditions when forced to by people. But in warmer climes—no way.")

I have been unsuccessful in finding good endurance times for these animals. http://www.jordanjubilee.com/outdoors/camels.htm claims "A very good camel can cover 120 or 130kms in 12 hours. Some specially bred camels have been known to continue at racing speed for up to 18 hours."

Getting similar times for ostrich and pronghorn antelope, which don't have jockeys and even less reason to run for 12 hours straight, would be much harder. While doable, there's little fame or money reward for doing so, which means the observations are based on the average fastest speed for the species, and not the fastest of the fastest like it is for humans.

Oh, and I wonder if a specially prepared road or track would give better times for a camel; the human times you quoted are on roads or tracks, not cross-country like the camel races.
choose a platform/technology, download the sdk or any other dependencies, then start looking at sample code. If you know c++ then you at least have a grasp on how a computer carries out tasks pro-grammatically, its all the same in principle so jump in head first and dont beat about the bush!

If web stuff is where you interest lies then you should follow every tutorial on w3cschools and by the time you have gone through that you will be primed
Hello woodall, you can add a file by clicking the plus button in the bottom left of the screen. If that button doesn't appear for you, then that's a whole other issue. Please let me know. Similarly, the minus button removes files. Double-clicking a filename lets you rename it.

Edit: Just noticed how unintuitive the position of the +/- buttons are. I'll see what I can do for Plunker 2.0
But what about your kar- nevermind.
When Twitter recently had accounts and passwords leaked, many were attached to spam accounts or duplicate records. Most had obvious passwords (like 1234).

Are these legitimate active accounts? Can you do anything with the hashed passwords alone?
>The qualities that make for a good teacher--intelligence, patience, curiosity, and creativity--are diametrically opposed to the qualities of a "highly qualified education professional.

You're reading too much into it. I meant a good, competent educator.
A bit more context: Ridiculous Fish is an Apple Engineer on the AppKit team. He also has a nice hex editor for the Mac (Hex Fiend) and an interesting programming Blog:

http://ridiculousfish.com/blog/
A single point of failure sounds dangerous.
People should just avoid using the same password for different websites. (That's what KeePass is for..) Perhaps a clever extension / browser feature could ensure that. (e.g. "Warning: You are probably using the same password for facebook.com")
This makes me wonder. I've been relying on Django's built in user authentication lately. Does anyone know if that's pretty safe? Is it doing the right thing for hashing passwords?
> "But letting people stay temporarily in unoccupied rooms or houses is the opposite of harmful"

Until some of those guests get murdered, raped, videocammed in the shower, have their possessions stolen, etc etc etc.

We have regulation on this type of thing for a reason. Allowing anyone to just suddenly decide they are now a hotel, is a recipe for disaster.
Software development service
Joomsopt is an experienced web consultant in Maryland , USA. We provide professional website developmen
and design services.our services is software development service,e-commerce web design,Flash Designs,Business Logos
One thing that has always puzzled me about AirBNB is that there's no mention anywhere about taxes. All this money changing hands without being taxed sure seems weird. Renters usually pay taxes for the rent they get, shouldn't people doing this on AirBNB do the same?
I know a lot of companies just keep your account including your password in there database while you removed your account.

Can I be sure my account was totally removed when I removed my LinkedIn account? Because the "please change your password as soon as possible" won't help me much.
Good on ya mate! I'm a fellow Aussie who's just done the same thing - six days to go until I can build my robots full time.
What does patio11 do now? Consulting?
What you gotta do is match up each bozo with another - forwarding their messages to one another and letting them tie each other up in perverted conversation.

For bonus points, implement smart gender substitution, switching the gender of all first person references before forwarding on each message.
You can just replace any "bit.ly" with "j.mp" and the url should work.
Whoah Robots? Tell us more please.
I've developed a system (kept only in my head) where every password I use is based off on the name of the service. This means that with just one of my passwords, you're most likely not getting anywhere. With two, you have a bigger chance of figuring out the differences and thus the system, but it works fine for me at the moment.
Keep in mind that whoever leaked the hashes is probably keeping the usernames / emails for themselves. The forum in question doesn't allow posting of user-identifiable information according to the forum guidelines.

The leaked hashes seems to be SHA-1. I've also confirmed that the hash of my own (semi-complex) LinkedIn password is in the list.
Accidentally this is the same password as I had for HN and that I've now changed (phew! THAT'd been bad! :-)
(D-Day Remembered) War Is Hell
I doubt that this is a "pirate levy" at all. The fee on storage media is usually supposed to cover media shared with family and close friends, which is legal in many countries and does not count as piracy.
If this switch works for me, and I can finally be free of my PayPal taskmasters, I'll be subscribing to your candy service!
I just noticed a subtle link to apps on the top right of the site: http://splinter.com.au/pages/apps

I'm a little less concerned now that I see he has actually made some apps, but it still kind of freaks me out just reading this post.
It's 1850%[1] but still outlandish, also they are taxing external hard drives yet not internal ones, it's a farce in every way possible.

Just wait until they figure out what dropbox is.

[1] http://translate.google.com/translate?hl=en&sl=en&tl...
You can use it for checking whether your password was leaked. You don't need usernames for that.
There should be a huge banner on linked in urging users to change their passwords in my opinion.
So, You Want a Job In Web Development? Get Cerified!
That's all very well, but how is your cat from the three point line, and can it drive to the basket?

I will remark that over 25 years ago I went to the Old Dominion 100 Mile race as "handler" for a friend, i.e. one who drives around with refreshments, dry socks, etc. One may also enter horses in the race, both for 50 and for 100 miles. I was interested to see that there were intermediate checks for the horses, where the heart rate was checked after some short period of rest (and perhaps before, I forget). Humans got a looking over before the race, but were on their own after that.
The law of orthogonality http://ridiculousfish.com/shell/user_doc/html/design.html#or...
Or they may use this as an advertisment for selling the actual dataset.
No they're not. I tried the following:

> irb

> require 'digest/sha1'

> Digest::SHA1.hexdigest 'my_password'

=> hash_string

Then I searched the file with the hash string and found my password. I really hope they don't also have the usernames somewhere.
"Watch out, Netscape Navigator 4.0!"
From the site:

"While touchscreens provide a versatile user experience, they provide no tactile experience for consumers. Vibration haptics and similar solutions try to simulate a sensation of touch, but all are "feedback" technologies, vibrating only after touching the screen (even if they are touched in the wrong place or by mistake). In contrast, Tactus' technology creates real, physical buttons, where users can rest their fingers on the buttons, as on a mechanical keyboard, and input data by pressing down on the keys. Tactus is the only solution to both "orientation" and "confirmation" problems that are inherent in touch screens."
By centralizing authentication, you make that central provider an even bigger target and you risk losing access to other services as you lose your main account (Google is known to sometimes terminate accounts with no way of recurse).

Finally, when that central provider gets hacked, all your dependent services are now also compromised.

And as we know from the CloudFlare story over the weekend, not even Google with their 2 factor authentication is devoid of issues.

No. Centralizing your login to one third-party as as bad as the current practice of reusing your password for every service you have an account with. The only way that is reasonably safe is to use different random credentials for every service and store these credentials somewhere under your (and only your) control (i.e. a password manager or a piece of paper)
Where is this? Where I live, most people don't know English nearly well enough to watch the shows without subtitles, and community created subs are very hit-and-miss, both in availability and quality.
Are the hashed passwords not salted?