skysight-inc/HackerNews huggingface dataset:
"What does salting and bcrypting buy in way of protection?"

Information leaks are common: a backup tape gets FedExed to the wrong address, file sharing gets accidentally turned on, a Russian hacker finds a security hole in your machine while scanning millions of machines, some idiot puts the password database on a laptop and loses it. These sorts of problems are constantly making the headlines.

If you have bcrypt-style password encryption, such leaks are a nuisance and embarrassment.

If you do not have password encryption, the leak recipient can easily impersonate any and all users. They can control your system, create false communication, cause industrial equipment to destroy itself, send harassing messages, conduct financial fraud, and so forth.

The cost to use password encryption is a little engineering labor, the return on investment is a substantial reduction in risk.
How Project Noah plans on generating revenue from the (smart) mob
Rats go high tech to root out land mines
The simulation hypothesis doesn't change anything with regards to science, though. Experience shows that the simulation has some kind of consistency that allows us to make predictions. Science is a systematic way to explore how the simulation works. Call it "the real world" or "the simulation", it doesn't really change anything.
I agree dynamic languages result in smaller codebases, but that's only because they tend to be so much more concise than most statically typed languages.

Also, as for large and complex projects done by distributed teams, I don't have to point much further than Django or Plone to prove dynamic typing works well in that context.
AVG on “Do Not Track”: We Applaud You, Microsoft, But…
In several European countries, fatality rate was reduced by a dramatic amount by being stricter on speed limits, alcohol, reckless driving, etc and building (much) better cars. See the statistics:

http://www.securite-routiere.org/Fiches/statistiques/statint...

In fact, USA are about the only developed country which didn't make any significant progress in the past 20 years.
W3C Standards for Web Applications on Mobile: current state and roadmap
Show HN: My learn-Zend project -- A chat room on top of all the web's sites
It's to the point that there's probably a small handful of people who comment on Facebook that are worth listening to.

The saturation point has been reached and there's very little original thought left, just endless regurgitation of shallow "analysis".

FB will do what FB does.
Bankruptcy help and its alternatives
Two internets looks like the direction Google are taking us, not Microsoft. No other company is so willing to bypass the standardization process so willingly, and force other browser vendors to use their technology or face compatibility issues.

SPDY, NaCl, Dart are among some of the examples. Developed behind closed doors where nobody else can have a say, then released as an "open standard", but at the same time slipped into the browser and promoted for use - thereby eliminating the option for others to propose an alternative, or any major (breaking) change.

I'm all for pushing forward with tehcnology, but google should open their doors earlier, or we'll end up in a situation where they're effectively dictating the direction of the web and other browser vendors are busy playing catch-up.

It'll only be impressive if Google actually take the advice from Opera et al, and adjust their SPDY protocol to suit everyone - not just Chrome users. (And the same for NaCl, Dart, and the next "new standard" Google push for).
" Like Zuckerberg said: Move fast, fix later."

And you will have a good enough product but never an awesome one, as "later" never comes, and when it comes the person that created the feature is not in the company or is not available or does not remember why he did it the way he did it or they are cascade bugs....

This approach was used by American cars and was very good for testing different things while the industry evolved, but when industry matured the Japanese(and German) with the "stop the assembly line until the bug is fixed" won.

Sometimes good enough wins, some time perfectionism does.
The part quoted said it clearly

In the first case, the use of a statically typed programming language had a significant negative impact

Considering the size of the sample, I'd guess the difference is rather large to considered significant. By looking at the numbers quickly, it seems to be around 25%. I'm a bit shocked, in fact, because in my own experience, the difference is much larger, but this experiment controls for language and my experience doesn't.
PS: I'm leaving this comment without any reference to the site name, so I can copy and paste it verbatim in the future; it looks like this kind of breaches will not stop soon.

Be aware that there is the possibility[0] that HN's (or other sites') anti-spam features may detect a copy-pasted post as duplicate or artificial content, and kill it and/or your account. It's probably better to add a link to the original post, with some article-specific text.

[0] Based on speculation and inference, not actual knowledge.
>>You can take your Ferrari on the Autobahn; I'll be out playing in the dirt with my kid.

Most people would be OK with that, the problem only starts when you start comparing the Ferrari guy and play-in-the-dirt-with-kid guy.

Objectively everyone is happy, subjectively they are not. And no human ever exists in isolation.
Lol who cares. Linkedin doesn't even use SSL. But yes, for other sites it is a good idea.
Seems like a trojan horse disruption tactic to me. Playing nice at first, then when they get some real traction, they'll reveal their true intentions.
>>(there just isn't a big consumer market and big bubbly stock market, excepting China and maybe India)

I am from India. And start up scenario in India is not very great. And programmer salaries are average no matter where you work.
I think the consumption of the rest of the system is fairly negligible, especially considering how inaccurate the TDP figures are to begin with. Eg this[1] system with a 95W TDP CPU draws 92 watts from the wall. And that is with off-the-shelf parts. Swap in a low-power CPU and overall optimize for power consumption and I wouldn't be surprised if you'd get below 50W.
It's amazing how different how life is lived and understood between depressive and non depressive people.

I personally have a really hard time even imagining depression, and I ask myself: "how can it be so hard to just pull yourself together?"

I can rationally understand it is really hard, but I can't imagine it.
Ideone : A cool online IDE & Debugging Tool
"Almost no CS papers I've read have contained empirical studies."

You aren't reading the right papers then. At least in Software Engineering, you can't get into the main conferences (ICSE and FSE) without a pretty significant empirical study.
Switzerland: Court Rules in Favour of Google Street View
DotJS.eu, a conference in Paris on Nov 30th with jashkenas, fat, mrdoob ...
The headline is actually misleading to a certain degree:

Sure, Google Street View remains legal in Switzerland but Google will have to reshoot all images within three years – among others obligations imposed by the Swiss Federal Court.
Here’s What Happens When Chinese Hackers Hit Your Blog
Dead State: The Zombie Survival RPG on Kickstarter
Actually, you're right. I wasn't thinking of it in terms of "best of the best." No doubt that's what these games are. I was thinking about from the perspective of, maybe, a one man team that would be delighted to see even $100k in the lifetime ROI.
Or... you know, the ISP could block a range?
Market is testing for many more different features than just usability, and as such is rather useless if you want to test a single thing.
Computer Enthusiast
I had my previous car set up so that there was only a tiny bit of overlap. This left my mind free of worry about a blind spot between them while giving me full view of everything behind me.

Sadly, my new car's mirrors can't be positioned like this, and I really hate backing up in it. Due to the shape of it, I think the only solution is going to be a camera and video display. If I could find one that had nearly 180 degrees of viewing angle, that would be awesome. I usually don't need to judge where it is, just that there's something there or not.
>>How do you explain people that are financially secure but work anyway?

Working on what? I pity the person who has all the money in the world to take a permanent holiday, but is still a MegaCorp slave. Who works from 9-5 every day. I can understand if you are working on a curious problem. But if you have a financial leg to stand on and you are still on a day to day job. You need to seriously rethink your life and how you are spending your time.

>>Working is part of life.

Part, yes. But not your whole life. That's the whole point.

>>Ferraris and vacations to Europe are fun, but there's plenty of more affordable entertainment that is just as fun.

Being happy with little isn't the same as having experiences bought by big money. At most, being happy with little is only a indication of compromise, you show when you resign to trying no more.
What exactly would HBO need to do to prove to you they care about copyright infringement?
Was wondering about this too, but presumably that might impact other people using the range? (If the ISP owns it, rather than TPB). I don't know the specifics of the various court orders/rulings though.
Using Firefox 16.0a1 (2012-06-07) on OS X it's telling me my battery is at 100% and charging, while it's at 95% and not charging.
Am I the only one who can't stand when people use IOS instead of iOS?

I don't mind a little typo, but IOS [1] is a completely different operating system...

[1] http://en.wikipedia.org/wiki/Cisco_IOS
You can certainly "do what you love" after work. I'd argue that that's what 99% of the people actually do, they stand a job they dislike and then they go home or to a bar to eat, fuck, socialize and watch sports.

I think that it's really important to try to find passion in our lives. Not necessarily a passion that is a job, but a passion that is fulfilling.

I know that this is not what the author is saying, but I think it's an important perspective to keep.
Reserved instances are not tied to a specific machine. If you buy say 5 reserved instances of a specific server type, you have a pool of servers that can run at a discount. IE if you decide your DB needs to go on a bigger box you can apply the reserved instance discount to some of your application servers or whatever.
I have had my side view mirrors setup like this for years and it isn't always better.

The first problem is that you cannot see your car in the side view mirror. This doesn't seem like a big deal, but it can be difficult to judge where everything in the mirror is positioned if you don't have a reference point. You get used to this.

The second issue is that if you have a big straight long line of cars behind that are close together (e.g. traffic on the interstate is at a crawl), you can not see far back on either side of your lane since your mirrors are pointed out and your center mirror is mostly consumed by the vehicle behind you. This makes it difficult to safely merge out of your lane in this situation.
Article asserts it's there to detect double taps, but I'd add that it's a very useful user experience tweak to help deal with mis-taps.

On HN, for example, I'll frequently hit the article link instead of the comments and this delay (combined with the network latency) often lets me re-tap the right link.
Wake up and smell the coffee .. this is about what the rest of the world pays for programming hours, and it should be so: programming is overpaid in the US.
Here's the problem -- you fixated on this:

(original premise): you say that it's very bad that you have to use an rdb for admin

...but it's not what I said; this is what I said...

"Django locks you into a RDBMS if you want to hook into all of Django's components like auth, admin, etc"

I'm not saying that it's bad that you have to use a relational database for auth, I'm saying that if you don't use a relational database and the ORM then you lose admin, auth, third-party apps, etc. Strip all of that out and what do you have left? See slide 71 (https://speakerdeck.com/u/kennethreitz/p/flasky-goodness).

And I have said this several times before (http://news.ycombinator.com/item?id=2911275), so no, I am not trying to retrofit my argument.

The talk barely mentions that Django is just a popular choice, it is your completely disconnected analysis that he was complaining about Django's harvesting of the "python mindshare".

If you don't think that's at least the subtext of what the presentation was about, look at the slide for Kenneth's primary thesis: "Open Source Everything" (slide 10 - https://speakerdeck.com/u/kennethreitz/p/flasky-goodness). And then go through the presentation again to see what he means -- "Single Code Bases Are Evil" (slide 45).
Scientists to Hold Bake Sale for NASA Saturday
Flame malware makers send 'suicide' code
What are the market's conclusions regarding dynamic and static typing ?
Mr. Doob? What an interesting nom de plume...
The Canadian Psycho: Uploading Murder To The Internet
Not quite; attackers aren't restricted to using a web interface, so they just send the partial hash directly to the remote site. As far as an MD5 brute force attack is concerned, "very difficult" is exactly as hard as a user-entered password. Keep in mind the purpose of hashing is to mitigate the damage caused by database leaks. Granted, an initial client side hash adds one more step the attacker must take to gain a password that's usable on other sites, but that doesn't protect the original site, unless implemented correctly will be crackable with effectively zero effort, and is unlikely to be implemented correctly.
I'm a cyclist but I've never worked as one
Frampol Helping Zimbabwe
A Zim IT company with a big heart maintains S. Machel/Mutare Road & Supports Orphans
;-)

For those who don't know him, he's the creator of Three.js and made great JS demos like http://ro.me or http://www.thewildernessdowntown.com
They could do that, but ISP's prefer to not fill up their routing table with lots of null routes.

IPv6 addresses and subnet masks are 4 times the size of IPv4's - shifting IP's between a number of different ranges would start to make any network engineer cringe - especially if they start blocking at the /64 level (i.e. smallest allocation possible at the moment - 18,446,744,073,709,551,616 addresses)
Not long ago, I was doing something that needed to be fast and I tried the old the "x>>1" trick and timed it compared to x/2. Much to my surprise "x/2" was faster (which is why you should always time things instead of assuming).

The takeaway is not that "x/2 is faster than x>>1", instead it's that you shouldn't assume some code it faster - always time it.
Yeah, but it's still less annoying than seeing MAC used for Apple's desktop and notebook line.
Zucchini and Peas Pasta Sauce
Radiation goes over top in USA
The ability to easily clone a server, apply changes, test and eventually put it in production is the number one reason we keep pouring money at aws.
Alright chums. My home laptop can't have linux on it and be online. How do I buy this, and make it look like I paid for it on linux?
Trekking Tours India | Trek India | Trekking India | Trekking Holidays India
Garhwal Trekking Tours India-Enjoy trek India with Trekking Holidays India offering by trekhimalayas.in.
Yoga Retreats
Offering premier Yoga/Meditation Retreats & Yoga Teacher Training in the USA, as well as Yoga Travel & Seva in India and abroad.
White Bar Stools: Benefits Of Buying White Bar Stools
White bar stools available in the market these days are comfortable, classy looking and affordable that can fits tour personal style. However, you need to make sure that which quality and brand of stools suites you need and home decor.
This is exactly the same stance that allowed Netscape to win the browsers wars initially by being more user friendly. Arrogant and 'misguided' technical people wanting to see developers shamed for not conforming with strict HTML standards. They instead took it out on the end user.
I found the essence of what you are saying and what's there in the book 'Zen and the Art of Motor Cycle Maintenance' to be somewhat similar.

Also, if somebody can share that simulation piece by the Mathematician, it will be really very good.
Craters serve as a Martian chronicle tribute to Bradbury
Technically that is possible. Whether your local legislation allows ranges to be blocked (and on what basis) is another issue.

At least the Finnish court order that ordered a block on TPB IP's had individual IP addresses in there, so at least another court session is required to change the IP's or make a whole range blocked. It's worth noting that the Finnish ISP's were not happy to put any filtering, DNS or IP, in place and will not add any blocks voluntarily.
With heaps of respect to the guys at Flutter... I'm stunned that they still managed to swing this post Leap Motion announcement.

Granted, flutter uses already available hardware (webcam) butbp the functionality is totally superseded by Leap IMO.

I still have Flutter installed and I still use it to show off from time to time but I felt bad for these guys once I saw the Leap.
ITU Facebook tax
How To Adjust Your Mirrors to Avoid Blind Spots
That programmer ability beats language choice by orders of magnitude, is already a familiar fact, so that would seem a satisfactory explanation for the observed variance.
After you buy the bundle it lets you choose how to classify your purchase.
The Power of Positivity
So apparently the problem isn't too little R&D money, it's too many researchers
Accept my money. And money of other countless beings who watch Game of Thrones outside of USA.
From the article "And it doesn't work yet on Mac (does work on iOS, Android and windows)."
Netflix CDN runs on FreeBSD
North Korea ships malware-infected games to South Korean users
It was not clear that you were talking about terrorism. The quote again is "99% of the violence committed against Israelis is done by Arabs." I now understand that you mean "terrorism" instead of "violence".

With that meaning, then yes, obviously there is little state-sponsored terrorism against Israelis by the government of Israel. But that seems rather a trivial statement, and I did not consider that that was your intent.
It doesn't have to be 1 second. Just use something that was designed to store passwords, so it at least it isn't blazing fast, and it gives semantic security, like bcrypt does (you don't even need to think about salts). Also, having a configurable amount of rounds gives some degree of security through obscurity, so the attacker also needs access to the code, or lose time figuring the correct amount of rounds. I think most attackers would just desist.

Sha-X, md5, etc, where designed to be fast. You don't want slow checksums.
Why a startup needs an investment?
Should Freelancers Set Up Coworking Spaces?
Three.js is amazing all demos are here : http://mrdoob.github.com/three.js/
The single biggest obstacle when using aws is EBS. It offers sub par and unpredictable io, making it near impossible to operate a traditional SQL DB at any significant load.
This is the problem that pushed us to explore mongodb two years ago, and i believe this is a major driver for noSQL adoption in startups.
Corporate Job To Entrepreneurship
Last.fm is investigating a leak of user passwords.
Neutrinos from CERN to Gran Sasso Respect Cosmic Speed Limit
I'm sorry but I disagree. The reason why you have so many people don't know anything about node&js is because of aggressive marketing & a referral plan.

It's what happens when you sell tickets to companies, for a price that is too high, and incentivize people to sell to their friends for some bounty you offer.

This isn't necessarily wrong, but trying to mask it as a "good thing" is naive at best.

ps. From an actual email sent to me from someone I have no idea who it is:

As an active participant in these technologies, you may be interested in joining our Conference Affiliate Program for Fluent. If you'd like to become an affiliate, you can link to the event through your blog/website and earn affiliate fees of $250 for every eligible referral. It's simple and takes minutes to sign up, so take a look and let me know if have any questions. To participate, sign up directly on this online form and we'll send you everything you need to get started within a couple of days:
http://fluentconf.com/fluent2012/public/sv/q/398
Azure just got a lot friendlier to node.js developers
World War Hack / a graphic novel / FREE TODAY ONLY
Hardest Training in the World: SAS (Special Air Service)
I'm curious why it would be illegal to remove debris from seeds (or does "clean" mean something else in this context?). What is Monsanto mixing with their Roundup-ready seeds that they so desperately want to get planted along with the crop?
Blogspam.

Original press release from Drexel University: http://www.drexel.edu/now/news-media/releases/archive/2012/J... Added value in PhysOrg article: zero.

Please, everyone, stop submitting links from PhysOrg and ScienceDaily. I have never ever ever seen anything on those sites that isn't either (1) bullshit or (2) a recycled press release with zero (or often negative) added value. (Sometimes it's both at once.) It only takes ten seconds' googling to find the original source.
Software can be refined, people can't .
Using iPad to program iPhone on the fly
(x+1)>>1 isn't equivalent to x/2. It gives the wrong result for positive numbers like (x=1).

Compilers actually generate (x+(x>>31))>>1 for signed division by 2. Which on x86 is three more instructions and requires an additional register.

Using x>>1 makes sense if you want floored division instead of truncating towards zero. Floored division is better if you want to reduce precision of the input or something like that and don't want to bias towards zero.
Nice venue! http://www.dotjs.eu/venue
I was expecting to see that someone ported jTDS (http://jtds.sourceforge.net/) to JavaScript. I have zero idea if something like Emscripten could be used for an effort like that, nor if it would be performant enough for use in a database scenario, but I think a pure JavaScript library would probably be useful to a wider audience.
I'm curious what your Master's is in and what "type" you're surrounded by.
100 euros seems a bit too much for me, especially that I'm not interested in Javascript, but I would love to get in touch with the hacker's community here in Paris.

Does anyone know how or where can I get to know them? What are the upcoming conferences happening in the area? What are the active communities?
Why don't you write small program in C and call it as external process from your PHP code to perform resource-intensive computations? Database should have nothing to do at all with user password hashes.
And at least one more bit for browser tracking...
> but I doubt it has ever been shown that the number of errors people make because of using curved mirrors is larger than the number of errors people make while using regular mirrors.

I'm even more interested in the number of errors people make from curved mirrors compared to the number of errors people make from having no mirrors at all (regarding the blind spot area)
AS IPv4 addresses become more scarce and traded more often, newly purchased IP addresses may previously have been blackholed and are now useless. There are no easy ways to get an IP addressed off a blacklist.

With IPv6 it may be easier to justify blocking large ranges essentially due to the very large IPv6 address space.
Domestic Flights in India
Hamari Yatra offers Cheap Domestic Flights in India, cheap flights tickets booking, cheap airlines tickets, low cost airlines flights, book airlines tickets, flight tickets booking at cheap prices at http://www.hamariyatra.com/