skysight-inc/HackerNews huggingface dataset:
Last commit: 4 years ago.

http://sunflow.svn.sourceforge.net/viewvc/sunflow?view=revis...
https://github.com/fpsunflower/sunflow

This seems to be pretty much dead. Anyone knows what happened? The last commit message doesn't sound like they are closing shop.

FWIW, there seem to be some forks and projects relying on it on github:

https://github.com/search?langOverride=&q=sunflow&re...
You don't mean encryption. Passwords should be hashed.
For scientists seeking extraterrestrial life, Kepler probe is step one
THANK YOU

"use bcrypt" has become an HN meme, with all the bad implications of it

As if scrypt, pbkdf2 didn't exist. Or as if bcrypt has always existed and doesn't have any weakness
2012: It’s the end of the (Internet) world as we know it
Facebook valued at $250 per share immediately after IPO would value them 800x earnings and $500B market cap (close to AAPL, 2x Wal-Mart,50% more than Exxon-Mobil).

In other words, total delusion on the part of anyone who thought that FB would pop 7x on the IPO.
Doesn't this imply that LinkedIn doesn't salt the password prior to storing it. So then a good chunk of those passwords will be in a rainbow table.
Ha. I'm in the same boat. This is my second account after the first one got ghost banned (for a single comment and the followups attempting to explain).
That's a fair point.

In my defence, I'm not complaining about it, just agreeing with the guy I replied to that I was somewhat disappointed. I was then curious why I was disappointed, and wondered whether my rationale was generalisable. It probably isn't.
Where in Australia are you? There are some good meetups for startup guys. Join one of them; it will make it easier for you socially I think. I'm going along to Silicon Beach Melbourne tomorrow night.
Speaking of machine-processing realtime human interaction, a friend once patched an ircd (in the spirit of the SWIM acronym) to only allow pass text written in E-Prime.

http://en.wikipedia.org/wiki/E-Prime

I thought it was a sweet hack, especially considering the ratio of utility value to length of the patch.
I think a lot of these comments are focusing on the wrong part of the text. I think what the author is really trying to convey is that taking standardized tests is not going to make a child want to grow up to build rockets or robots.

I'm a mechanical engineer and attended a technical university, and from my experience, most of the other students in technical fields are ones that grew up with an innate interest in building things and creating things. Not all children do things like that in their spare time. And not all parents give their children the opportunity to do things like that in their spare time.

Spending time in school taking standardized tests instead of performing scientific experiments and building things makes children bored with science and math. It is, very sadly, a wasted opportunity. Most children have no idea how exciting science and technology can be. All they know is sitting in class, reading books, working boring problems.

When a child gets to high school and starts applying (or not applying) for colleges, they are going to choose a subject that they remember being interesting. Most children that I have met do not find taking tests and reading about science to be interesting.

If children were more involved in the learning process through hands-on experiences, imagine the kind of excitement that would be generated among the young people. Imagine the kinds of things we would be capable of as a species if there were more people excited and invested in science and technology.

I realize that most of the readers of Hacker News were probably the children that grew up wanting to build and create. But there are so many children out there who need to be inspired in order to succeed, and those are the ones that are being failed by our flawed education system.
Pacific Crest’s 2011 SaaS Survey
Simply put -- it's beautiful.
I believe existing deal sites have different kinds of audience. However, this service will focus on early adopters interested trying out new technologies. Also, it will create a community of such users and will track their interests and activity to recommend relevant startups deals to them.
In fairness to Twitter, it was never actually known if the accounts/passwords came from Twitter.com (proper) or (more likely) leaked from some 3rd-party Twitter-integrating app that had pre-OAuth integration.
Disclaimer: I am not a cryptographic expert.

https://docs.djangoproject.com/en/dev/topics/auth/

Django by default uses the PBKDF2 algorithm, which is better than nothing/md5/no salt sha1.

I'd use bcrypt or scrypt by default, better be safe than sorry.
"or do you take your meat with no seasoning at all?"

Good meat cooked right needs no seasoning. Even when adding flavors to improve sub-par meat, we don't make it taste like carrots or lettuce etc.
C Integer Quiz Rationale
58% of Americans agree Wall Street makes important contribution to economy
When it comes tax time, isn't it the individuals responsibility to report all their income?
Hard to tell from docs if fish has vi mode? vi mode is the main thing I love about bash.
Yeah - forget my boring ios apps - tell me more!
LinkedIn could easily match each hash to a user. Then they should lock each of those accounts and force them to change their password.
The reason people are going to use bcrypt is that there are more likely going to be bcrypt implementations in their given language:
http://stackoverflow.com/questions/10149554/are-there-any-ph...

I just had to make this choice a few days ago and bcrypt seemed like the best option with working PHP implementations. And I sure as hell am not going to try to roll my own.
Payments is a really exciting space at the moment, its being disrupted at an impressive rate and it seems a new provider pops up almost every day. While its great to read this story I believe to a certain extent at the moment its better the devil you know, especially if you are an established business.

I always recommend PayPal to our merchants, not only is it the quickest way to send and receive money online its also backed up by one of the largest payment networks in the world. Also lots of people have money in paypal accounts they would like to spend, not everyone links it back to their bank account. For E-Commerce sites you can expect to loose about 10% of sales by not offering PayPal. However, I appreciate its not for everyone.

For alternatives, here I think it really depends on the size and type of your business. If you are doing any type of volume the only serious way to receive payments online is via a Payment Service Provider (PSP), and there are millions of them. You can seriously reduce your transaction costs and often you get some pretty weapons grade anti fraud protection thrown in. Unfortunately setting up a PSP isn't as simple as it sounds, its a two stage process starting with a Merchant Account. This space is pretty dominated by the traditional banks so get ready for a little red tape. Once you have your Merchant Account the PSP slice is normally fairly painless.

With regards to Stripe, I'd personally give any startup in this space some time to debug and increase transactions before you trust them with your business.

Nice read.
How paranormal research differs from normal research
LinkedIn: 6.5 million hashed passwords reportedly leaked
Attending an Illegal Protest in Russia Could Soon Cost You $9000
Thanks, I'm still going to revamp the signup flow to include gifting, so I'll think about adding that then.
Exactly, and my point is that currently my ISP assigns IPv4 addresses dynamically, so I'll get a different one every time I turn on my ADSL modem. I think this is quite common, and as a consequence IPv4 addresses are not a reliable way of identifying a home computer. If every home connection is assigned a static IPv6 prefix, that becomes a reliable identifier. Then you can credibly say "This comment on my blog is from the same computer as this Wikipedia edit from last month!", something you currently cannot say for home computers in general (while work computers are much more likely to have static IPv4 addresses and in that case IPv6 doesn't make it worse).

As I understand it, the privacy extensions in IPv6 were designed to solve another, bigger privacy concern that was totally absent from IPv4: if the second part of the IP address is based on the MAC address, then smartphones and laptops can be traced globally, no matter where they connect to the network (home, hotel room, 3G...)
That was back in what, the 50s and 60s? I completly agree that the system worked back then. But in the 21st century well you can't adopt to new times by charging more from everyone you can. By doing simply that, you will pervert the very idea behind the system. It seems, at least to me, that the systems somehow developed a life by itself. And since that life currently fits into a lot of agendas, nobody will do something about it.
1. No need to mess with configs. Works out of the box.

2. Breaking Bourne Shell compatibility. Personally I find Bourne syntax hard to learn and hard to read. Fish syntax is much better. [1, 2]

[1]: http://en.wikipedia.org/wiki/Friendly_interactive_shell

[2]: http://ridiculousfish.com/shell/user_doc/html/index.html
Office for iPad launching in November
Great, allow my neighbors in my shared hallway apartment to rent out their rooms to strangers on the Internet. Glad I am not a single female.
I’m going to make, market, and hustle my iPhone apps like my life depends on it.

I've been doing exactly this for the last year and I'm very close to switching my focus back to web development. From what I can tell the easy money in the app store is long gone and conditions do not favor the lone developer now. I have two iPad apps that frequently appear in the "What's Hot" list for music and if the revenue they generate is any indication most of us would be better off working as fry cooks.

The web gives you so much more insight into your potential customer's behavior that I think that alone might make it a better bet for a solo dev.

If you do decide to go solo I'd strongly recommend you hire a professional designer. Aesthetic standards are very high now and from what I can see pretty graphics matter a lot more to the typical iOS app buyer than features.
Yes. The hash I calculated was without a salt (the same way you generate a hash on sites like http://darrenfauth.com/generators/sha1)
The greatest sneaker commercial
I am not confusing the two.

The issue is the same: static payment in the form of a tax/obligatory fee, without providing a service. You pay a tax for empty CDs, because you COULD copy music onto them. You pay a fee for public broadcasting, because you COULD use it. The companies are different, but the idea and the mindset is the same. Collecting money, even if a service is not used.
أساحبي
بيج اساحبي واساديكي واساحبي سوسيتي بيج Asa7be
https://www.facebook.com/2sa7Bi
Amy generally doesn't advise leaving your day job either (disclosure: I've been through her 30x500 course).

Having said that, I'm in a similar situation (sole bread winner, 2 kids) and I'll probably be handing in my notice this week too. It's partly because the job was causing me debilitating levels of depression that I just couldn't work in my spare time. I'm planning to work as a freelance rails developer (got my first client on board already) and work on my 30x500 product.

I found Jonathan Fields' book 'Uncertainty' quite enlightening and motivating.
The future sure looks bleak when only one senator opposes this kind of tyranny.
If you use the ASP.NET Membership that's what you get, unless you do something custom.

Edit: they are salted though.
Is waving your hands better UI than typing?
If a database of bcrypted passwords from LNKD had been leaked, we'd be having a totally different conversation right now. (Same, of course, with scrypt etc.)
You can generate your own SHA1 for your password and check if it's existing in the txt file.

http://jssha.sourceforge.net/
Seo services
Zuan Technologies is one of the best seo and sem company in India. Our service will always towards satisfaction to the customer of the seo clients
Thanks, I just started to so not totally sure of all the fees to the cent yet. Seems like there is a refund button in Recurly.
You're totally right. And also, some have pointed out (quite correctly) that amy and patrick recommend starting out on the side, so let me explain further:

* I have enough savings to last a few months if i sell my motorbike

* I'm reasonably well connected and, if all goes badly, getting an ios contract/job in a few months time won't be
hard

* I already have a dozen apps on the app store, bringing in between $100-$150 daily

* Due to a recent house move, i'm unable to code on the train any more which used to be brilliant, so my part-time efforts have dwindled.

As for the apps, I really need to make a promo-page for them, the best i can currently give you is here: http://apps.splinter.com.au/
Distribution seems to me the big advantage of mobile apps.

How's your experience been with getting users for your mobile apps? How does it compare to your experience with web apps?
I think that is the first response most people have, but they've booked something like 5MM nights with no adverse events like you've described. Also, VBRO and Homeaway are both older companies with similar business models and neither has had a huge PR disaster like you describe.
I think you're confusing unit tests with integration tests.

In integration tests you should indeed run as close to real data as possible and execute your system's entire stack, including database calls. Unit tests on the other hand should be used to test small decoupled parts of the codebase.

If you have a class that implements certain business logic against data that would normally be retrieved from a database, a unit test using mocks can test this business logic in isolation, feeding a variety of data through the method to test a large number of scenarios and edge cases.

Speeding up this kind of testing is definitely important; test suites using mocks that can run in seconds can be executed after most changes to give immediate feedback to developers, whereas integration-type tests that might take an hour or more would slow down development too much to do this.

Integration tests are important as well, and should be run possibly nightly or at least prior to any release. They cannot be used to give the kind of immediate feedback that truly decoupled unit tests give though.
You’ll Hate Windows 8
It'll be nice not only for the blind (assuming Braille or something comparable is feasible with this technology) but for those of us who'd like to be able to touch-type, which is tough with existing touch-screens.
You're absolutely right. Maybe i should explain further: I do actually have some moderately successful apps on the app store.
It's funny how we still have that reaction to robots, when 30years ago it was assumed that we'd all have them living in our homes by now!
Ahhh, finally. I used to use fish for many months, but after i figured that there is no development anymore, i switched back to bash...

Now it's time to change to fishfish and decide what's best suited for me! :)

edit: Also, i am disappointed that the ASCII-art fish on the frontpage is actually a picture and not ascii :(
What’s going on in NYC? (Big life expectancy gains)
I've first hand experienced bait and switch scams, thieving cleaning staff, and made up fees in cheap hotels from around the world. NYC hotels are particularly bad offenders even though they are thoroughly regulated.

If anything an AirBnB host infinitely more trackable and accountable than a hotel you book directly or through an oblivious intermediary (travel agent). Not to mention the countless minimum wage staff working for these hotels that are also much harder to thoroughly vet and trust individually than a single host.

Just because something is more familiar (hotels) doesn't mean it's safer.
> which is better than nothing/md5/no salt sha1.

It's also better than salted sha1 since it performs multiple iteration rounds leading to (configurable) higher computational complexity.
MD5 isn't the issue - it's the lack of salting. Without a salt, almost any hash can be cracked with a rainbow table. With a salt, you'd need to know the salt for each hash, and then generate a new rainbow table, in order to recover the original password.
PBKDF2 is way better than salted hashes. It's right there with bcrypt and scrypt on the "good choices" list.
Which should be done, but which doesn't help those users where it matters most; the real value of this database is that some people (~everyone) reuses passwords across sites.
The #1 problem with the app store for a developer is that it's a total black box. I have no idea how my users find my apps, how they choose them over other apps, or even which aspects of my apps page are most or least effective in enticing them. Contrast this with the kind of insanely detailed analytics you can get on the web now and it's like flying blind.

I suspect most of my users have found my apps via posts I've made on dedicated music-making forums but I can't say for sure.

I haven't tried selling a web app yet but I did port my iPad synthesizer to the desktop and that seems to generate a lot more traffic without much effort on my part.
While I'm not aware of anything happening to the guests, I think that people should be wary before they open their home to Internet strangers.

See: http://ejroundtheworld.blogspot.com/2011/06/violated-travele...
Jobs:Hotels.com is looking for Java developers with Lucene/Solr experience
www.expediajobseurope.com

Making sure Hotels.com helps our customers find the perfect place and wake up happy is an exciting mission for our Java Developers. We are growing our development team so we can focus on implementing new features and functionality whilst innovating within the hotel search and booking experience.
Over 30 million monthly visitors across 70 countries in nearly 40 languages( and growing ) pose some rather interesting technical problems. Taking complex requirements and delivering them via super simple solutions is what makes us tick:

About you:
•	Have you been tirelessly sharpening your Java development skills for the past several years?
•	Do you focus on writing super simple and self-describing code?
•	Have you worked with others to refine application architecture through emergent design?
•	Have you collaborated with customers to build world class product capability?
•	Do you have plenty of experience with the spring framework and common open source tech?
•	Do you love working in an agile team?
•	Do you have experience tuning Java applications for high scalability?
•	Do you know who the gang-of four are?
•	Do you know the difference between TDD and BDD?
•	Do you look out for cool new technologies and think about how to use them?
•	Do you keep your technology skills in tip-top condition through continual learning?
•	Do you enjoy using technology to innovate in the e-commerce space?
We don't hire just for the sake of it, we hire the best people, and trust them to do what’s right!

With your knowledge and experience,you will work closely with product managers, architects, user experience developers, QA engineers and technical operations to build product features and capabilities that delight our customers.
If you answered yes to some, if not all the questions above and want to revolutionise travel through the power of technology then come in to our new office at Angel Building for a chat!
contact ksharkey@expedia.com for details
Any usage of an exploit risks its discovery.
Thanks for posting! I love hearing from amy's grads. I'm really seriously thinking of doing her course next time around. And i can totally relate to your 'debilitating' job, whereas in my case it was causing stress which, again, limits the amount you can (without being a superhuman stoic) achieve in your spare time.

PS please blog about your experiences freelancing and applying amy's principles, i'd love to read about it. Congrats on your first client!
This site doesn't say what it is, it just asks me for my money.
The package doesn't work on Debian testing/unstable/experimental: fish: /lib/i386-linux-gnu/i686/cmov/libc.so.6: version `GLIBC_2.15' not found (required by fish)

(I am running GLIB 2.13).

I tried compiling from source, but I am clearly missing dependencies. So far, I had to install:

libncurses5-dev, gettext, xsel, libxt-dev (alternatively, I could use --without-xsel and ignore these last two depends). You may want to add this to the project somewhere.

At any rate, I am looking forward to giving this a try.
People get murdered in hotels [1] and raped in hotels [2] and no doubt have things stolen.

We should really judge this on the data and see if the incidence of crime is higher in Airbnb cases.

[1] http://www.bbc.co.uk/news/uk-northern-ireland-18333584
[2] http://portsmouth-nh.patch.com/articles/woman-raped-in-hotel...
Totally agree. I'm all for the big life changing move - when there aren't people depending on you for their survival.

Also - you're building a house? If I was going to quit my consulting gig to do startups (which I'm strongly considering doing) I would (and do) keep my debt to a bare minimum.

Edit: Based on OP's answers in reply to the parent comment, it appears as though the situation is not quite as dire as it sounded at first read of the article.
Don’t Judge Your SEO in a Silo
You can perform this check even if they were salted.

Otherwise how could linkedin check if you correctly entered your password?

The salt is contained in cleartext as part of the hashed password, so that you can repeat the hashing the secret and match the two hashes.

The salt improves the security because:

1. even if two users use the same password, you cannot tell that by simply comparing the hashes

2. makes brute force checks much slower because you have to recompute the hash for every hashed password entry rather than once for every dictionary entry

3. Prevents building rainbow tables

(probably other reasons, I'm not a crypto expert)
Sunflow seems dead.

Take a look at LuxRender. Source: http://www.luxrender.net/en_GB/source_code

[edit] also take a look at the forum: http://www.luxrender.net/forum/ There are a lot of nice projects related to LuxRender. From exporters to GPU rendering.
Know What to Expect From Your SEO Firm
How about: "money does not buy happiness, but it can mitigate a whole lot of the misery associated with lack of money".

For an analogy - it's no more fun swimming in a 500 foot deep lake, than a 50 foot deep lake, but a 3 foot deep lake with rocks and waves is painful and dangerous and no fun.

The baseline of money that eliminates misery ( == "buys happiness") is that which takes a person from "really poor" to "modestly middle class".
Sydney. I go to cocoaheads, and am thinking about hitting up silicon beach sydney (i used to go, years ago) and maybe RORO and SydJS. Can you recommend anything else i should check out?
How Airtime plans to keep es out of the picture
I just plain don't understand these security questions!!

Am I an idiot!?! They can't possibly increase security.

I was quite upset when Apple forced me to add these to my apple ID.

Of course, I treat these questions like additional passwords. I write down the question in my password keeper, and input a random phrase into each.