skysight-inc/HackerNews huggingface dataset:
It seems pretty crap to just unilaterally make decisions regarding someone else's code.
Announcing Microsoft Roslyn June 2012 CTP
Ray Bradbury was one of my favorite authors as a child. The depth and complexity of his stories truly enlightened me about good Sci-Fi.

Most students in the US probably read Fahrenheit 451 in high school, but I enrolled in a literature course at the Naval Academy that focused on science fiction. The Martian Chronicles was a main text for the class. IIRC, the professor had a very special connection to Bradbury, but rather than get it completely wrong, I'll just state that I think the professor (who was a USAF officer) was the curator of a collection of his works.

I might try and re-read 451. I think his words will be even more powerful and prescient now.
Why is there dirt on Apple's iPhone page?
Over the past 6 months, there have been subtle, but bad changes in Apple's UI. I often think to myself that Steve would have vetoed these. We've all seen the controversy surrounding Apple TV's "interim" UI, with the corresponding confessions and retractions (http://www.cultofmac.com/155915/steve-jobs-hated-the-new-apple-tv-ui-but-apple-changed-it-anyway/).

The recent changes on Apple's website are perhaps the most gratuitous example yet. Against the tradition of hyperclean UI, somebody has injected loads of dirt at the top of the iPhone page.

I've attached a clip (http://bit.ly/NhmPKS) using the Burn tool in PS in order to make the dirt more visible. Even the top "cutoff" of their texture is somewhat arbitrary. To boot, there is no longer consistency between the Mac and iPod pages (with GRAY backgrounds?), nor the iPhone "dirt". Only the iPad page remains in true Apple fashion.

#stevewouldgoapeshit #nottherightthingtodo
I posted in another thread, but this one seems to be getting more traction:

What is the draw of the site for authors? I couldn't find anything about that - is it just the readership? Is there an ad platform with profit sharing?
on another note,

my fairly complex alphanumeric+symbol password IS in the dump, though not prepended truncated with 0's and the other one I found, which my coworker admitted was too short and alpha only, was in the dump with prepended 0's.

This could validate the fact that the truncated hashes are actually already cracked.
I never used Vista much(not a regular Windows user as such), but another reason why people might hated Vista with such passion was perhaps that most of the hardware people had was not sufficient for it. At least that was one major reason among many people I knew. Windows XP ran just fine even on 128MB RAM and Pentium III processor, however Vista required around 2GB for some decent performance. There were many people using considerably old boxes.
I guess you need to do both: change your password, but to something throwaway. Then when the hole is closed, change it again.
'password' and 'foobar' are both in there. '1234' is not, but that's probably because of a minimum length requirement.

Edit: '12345678' is in there, further bolstering the length requirement theory.
It's really hard to know how competent you are in any field, if you are incompetent.

There are known knowns, known unknowns, and unknown unknowns. The problem with really bad programmers, is that the unknown unknowns for them are really large... so they have no ability to gauge just how incompetent they are.

http://en.wikipedia.org/wiki/Dunning-Kruger_effect
Obligatory perl one-liner:

perl -MDigest::SHA -le '$h = substr( Digest::SHA::sha1_hex($ARGV[0]) , 5 ); open F, "<combo_not.txt"; do { print "found $_" if grep(/$h/, $_) } while (<F>)' password

(for people without shells)
At least you're going to have years to go through your database and change all your passwords.
Great, will read through the article and play around to see what the option does on my brothers Nikon D60 (I've been playing around with his camera before deciding whether to splash out). Great pictures, looked at them briefly, will look at them properly tonight. Thanks.
I think most people are more likely to work at a job they dislike and spend their weekends on their own endeavors than the other way around, that's all.
This is a change to the registration interface. It shouldn't impact most (any?) existing members...

The loss of openid button definitely affects existing members though...
In Java, why do people keep creating mutable objects?
I love the ribbon. I just got sick of memorizing arbitrary locations. I also manage IT and see even our more clueless users able to use it with ease. From a non-power user perspective its actually nice.

Not sure whats going on with this metro stuff, but the ribbon has been a pretty big success outside the group of people who have long memorized menus and are annoyed they need to learn something else.
CloudFlare launches new RailGun web acceleration service and business tiers
pg (or possibly another admin these days) will remove the create-account functionality if HN suddenly becomes very popular, as with the LinkedIn thread. I'm trying to find one of his comments where he mentions this, but there are 8,511 to wade through, and the obvious searches haven't found it yet.

edit: I may have misremembered; the first reference I've found was http://news.ycombinator.com/item?id=3481174, but I'm still looking.

edit: Gave up looking. I probably don't know what I'm talking about.
With thorium, we could have safe nuclear power
CSS Hat launches Tomorrow - June 8th
You can't anymore. There was a post a few months ago that you should set a password on the site itself to be able to continue to log on in the future (future being now, since a couple of days or maybe even weeks already).
Those paranoid tinfoil-hat wearing lunatics that generate absurdly long unique random passwords for every site are wringing their hands with glee because they found the hash of their LinkedIn password in the file. You're welcome.
To clarify, since your parent didn't actually misspeak-- There are actually only five main tastes your taste buds can detect. They just aren't organized by location.
These hashes were posted on a forum as a plea for help: the guy did not have enough computational power to crack them all on his own. Had they been salted bcrypt hashes, it might have actually discouraged him to the point of not even trying.

So yeah, the weakest passwords will always fall, but good solutions will go to great length to protect even the most clueless of users.
"But, I have this feeling that maybe the sheer numbers of people that enter the mobile app funnel at all far outweigh those on the web."

But you just heard from someone who said that even when their app shows up in the What's Hot list, they still don't get a lot of sales. Which also implies it doesn't take very many sales to get there.

Speculation about how truth may not be true is not very productive. It really doesn't matter how many people enter the funnel if few make it to the "give you money" step and you have no control over or visibility into the intermediate steps. It is for theory to explain reality, not the other way around.
This is exactly the point of Windows 8! Need to do work? Use the classic desktop. Aside from the Start Menu it hasn't really changed. Office doesn't even look like it will open in Metro.

Want to 'consume' content? Undock it and use it as a tablet with Metro.
Not true for everyone..I find working anywhere BUT home to be very distracting. Up until 8 months ago, I had worked exclusively from home (aside from the odd client appointment) for 10 years
That could be a good transition strategy if you're worried about being compromised before all your users have logged in again, but you would still want to move them over to using just the new system when they do. It probably would be fine, but when it comes to crypto you don't take chances when you don't have to.
Predictive Analyses for the US Elections 2012
I use my SD card exclusively to copy pirated movies from my netbook to play in our DVD player :P
This. Microsoft made the boneheaded move of allowing retailers to sell machines that had 1GB of RAM installed with Vista. Could they run it? Sure. Could they run it well? Absolutely not. Because of this, my wife (who made the mistake of letting her "just tech smart enough to be dangerous" sister accompany her to the store) bought a Vista machine that has forever made her swear off "PC's". Now she's a dedicated Mac fan.
Can you explain that a little more? I haven't played with 8 at all yet, but surely they allow more than one app at a time?
I don't see anything 500'ing on our side. If you could fire up a debugger and see what's being sent to the server and the response you get back, that'd be great.

The issues are here: https://github.com/brutasse/djangopeople/issues
I was in the same boat as the parent post until your third bullet. That's certainly enough to keep the mortgage paid and food on the table, so I think now is the perfect time to do what you're doing. When the kids go to school and things get more expensive for you it'll be harder and harder to make this decision.

Best to find out now if it's sustainable for you. Good luck.
Current PHP is 5.4. Did you perform any test or benchmark with the new version? Do you gain anything from it? By the way, your project looks very interesting!
RIP Bradbury. Martian Chronicles is indirectly one of the most influential books in my life, due to an interesting twist...

In high school, we had a literature class where there was a list of a couple hundred books we could choose from to read each month. At the end of the month, the teacher had a canned test she had purchased somewhere for each book, that we would take to prove our comprehension. For those of you who haven't read Martian Chronicles, it's a series of around 30 stories with mostly independent characters and story lines.

The test I was given was a "match the character to their description" test. Not only am I normally bad with names, but with 30 stories featuring unique charters, I had no idea on a majority of the names.

So, I flipped over the multiple choice test, and wrote an essay about how I read, comprehended, and loved the book,but this was an outrageous assessment, and a poor way to judge my aptitude.

Although I scored less than 30/100 on the multiple choice, the teacher gave me an A on the test.

I learned to think outside the box, and the power of reasoning and discussion. All the credit in the world to my teacher for having an open mind.

...Anyways, totally off topic, but it's something that will always stick with me. Bradbury was a great author who will be sorely missed.
Simple, just do a password reset on your hn username and it forwards to your gmail account
Yes, you can use Ctrl + F instead of right arrow key to autocomplete.
None of these seem to benefit the actual students/pupils much, though?
What would happen if kids could pick the schools they want to go to themselves?
I loved The Martian Chronicles, though I found it difficult to enjoy much of the rest of his writing. But his skill was undeniable, his influence is still huge, and you can find touches of his style in many other authors' work.

RIP
The enter (long alphanumeric and symbols) password/copy/paste/switch window was a little clunky in Android 2.2. Little better in ICS, so need to get back to using this.
Like XP or Vista: how will businesses treat Windows 8?
I'm not sure what you're implying. How have they 'closed the leak'?

If you find your hash in the list, you should change your password. If you don't, you should change your password.

I use LastPass to manage my passwords so I just generated another random 20+ char password and forgot about it.
And then some blu-rays still include unskippable advertising anyways. It makes me feel like I cannot actually purchase content. I can only pay for the privilege of watching advertisements + content.
Mine as well, unbroken (not prefixed with the 00000) in the original file.
Try actually reading the article. It is more balanced and informative than the title suggests.

I feel awkward even having to suggest to an HN'er this...
Unless you can't because that box isn't there to do a password reset. Which, btw, is really frustrating as I just had to create a second account to write this. I used to use OpenID and now I can't login to my old account at all.
Pittsburgh in the 1940s before "smoke control laws"
I've had the same password on linkedin for as long as I remember and neither the full hash nor the zero prefix edited was found in the dump.

Simple line used in OS X terminal:

grep -e "`echo -n "your pass" | openssl sha1`" combo_not.txt
Yep. Here is a treatment of that: https://gist.github.com/1051238
Dancer.js, a high level audio api to make visualizations
Obligatory shell one-liner:

grep `echo -n password | shasum | cut -c6-40` hacked.txt
Why isn't the company name mentioned in the headline?
Obviously my statement was purely subjective (style of writing).

That said: What details did you take away from the article? I'm serious. I just went back and skimmed the rest. It seems this is really a long version of 'someone found an exploit, we fixed it, he presented it in public and we handled the aftermath'. No details at all. The most technical bit was the 'Now we're so much more secure by requiring signed code', and that was it?
"Documentation? They call it code for a reason."
Please tell me more about YC's business model.
Here's some they didn't find, from /usr/dict/words: Paraná, Zürich, attaché. Not sure of the encoding, but I'd guess UTF-8.
I think we've reached a point with bcrypt that a good secure password system is within reach and comes with sane defaults and ease of use as features for most programming languages.

If it's just an issue of getting the word out there, then I'm hopeful things can improve.
Drew Houston and Arash Ferdowsi, Founders of Dropbox [2011]
You've been indoctrinated. Get help!
Although that makes sense to me as a technologist, I'm afraid that's going to confuse a whole lot of people. "So, this is my computer. That has Office, a bunch of games, etc. But when I take it with me, I can't access any of that? It's all different? Why?"

Apple's insight was that they should remain distinct devices - and I agree with them that this is a better user experience.
I agree.

I've been using OSX for about 3 years now. I just recently built and set up a PC with Windows 7 in the past 3-4 months. I am in absolutely no hurry to upgrade barring some huge technological innovation, which I have no reason to believe will be coming from Windows 8.
I wonder if the buttons can be relocated in real-time? Imagine a radio dial or fader that you could feel rotating or sliding under your fingers with resistance as it reached the end of allowed travel.

Pretty cool technology.
It's worse than that.

The roof should have been mined, but the soldiers petitioned the hierarchy to keep their sports field...
Because the answer to your question is one Google search away. HN people are tired of explaining it every single time bcrypt comes up.
If I find myself pricing a deal to make up for the would-be client's flake factor, I usually wind up regretting taking the client in the first place. But if it's all you have and you need to eat, by all means, add the dentist tax up front.
The damage that happened was due to misuse of fear. You wouldn't blame a surgeon for cutting up people to heal them, would you?
Congratulations Graduate Also, 9 Reasons Why I Will Never Hire You
The big difference between "hosted service" and "encrypted file in the cloud" is that the hosted service has, by definition, to store the key next to the lock to be practical.

The key for your encrypted file stays in your head (and/or in your wallet), so even a full-on total breach of Dropbox/iCloud, your key is safe, and 8 million rounds of 265-bit AES and a good password (my current KeePass settings) is still unbreakable[1].

1: Unless (perhaps) you have the attention of certain governments. And they always have the option of using a $5 wrench on you, anyway.
50% of programmers are below average.
How so? If that data alone won't bring significant improvements, how could it be the primary reason behind its collection? Much more likely they are collecting the data mainly for other applications and have the self driving car data as a nice addon.
Your startup’s board deck
I wonder, what if this list wasn't leaked from LinkedIn databases, but rather from some third-party service using the "enter your password" anti-pattern? A flaky service like that would likely not be very good at safely storing passwords.

Unfortunately, LinkedIn keeping mum on the subject makes it easy to speculate that it was actually coming from them. Otherwise it'd be easy to deny (and even spin: "How dare you! We never store unsalted hashes, we follow state-of-the-art practices here!!"). Also, their security track record is... embarrassing as it is.
Amazon Web Services: Rise of the utility cloud
Fair enough. A choropleth map would be cool. Another question, if I may: how come it's not obvious how to update your profile photo? Maybe I missed something, but I looked in earnest to find the option and could not.
I do live in Czech Republic and it's not illegal to download music and movies. However, sharing is illegal, so e.g. torrents are illegal.
Yes, and experience is in the details. The difference between Vista and 7 is not prominent, but it is big.
It's very clear to me what's going on here. This isn't a tablet os or a desktop os, because I believe that Microsoft is expecting the distinction between those devices to become less of a factor sooner than later. This os is intended for a mobile workstation type computer (AKA "transformer" devices). The implementation could use some polish, but the intent is that the metro ui is for the tablet or phone interface when there is no large format display or mouse connected. The desktop mode is for when the device is hooked up to a larger display and/or a mouse. However, why there isn't a clearer separation between the two interfaces is beyond me. I think this is a smart strategy by microsoft, the real question is whether they got it right. So far, I'm not convinced. That said, Asus seems to be sold on the idea.
This website has always been a tremendous pain in the ass to use. I just want to update my location =(
Yorapi
No they didn't salt them either haha!
I've found '1234678', 'password', 'qwerty', 'linkedin' and few other common phrases (already 00000'd, obviously), so it doesn't look like a list of just the hard ones.
Don't you think that has more to do with the fact that they asked for 25x sales than some sort of fundamental end to the financing market for technology?
In the US, you have an obligation to pay taxes on income, regardless of whether you get it in a traditional fashion or from a new economy web 2.0 social networking service, regardless of whether it is in cash or electronic, and regardless of whether the government is aware of it or not. Compliance with this is... mixed.

Airbnb follows its legal obligations to report monies which it disburses to hosts, which will in almost all cases constitute income, via a 1099 (or similar) form delivered to both the host and the IRS.

see: http://www.airbnb.com/help/question/122 , conveniently located near the top of the search results for [airbnb 1099] (if you knew the probable way they were going to report) or [airbnb taxes] if you didn't.
> The other group, the reckless, consists of those who have the skills but don't have the discipline. They are the cowboy programmers of yore. They code according to their own desires, do nothing to integrate their work with that of others, scrimp on basic discipline, and cause work for other team members.

It is worthwhile to note that Steve, Linus, Feynmann (last one in physics, not coding) all belong to this category. These are the people who do programming (or whatever else they like) for their own pleasure - to derive fun out of. They are unafraid to challenge the status quo - and they are exactly the ones who cause disruptive changes in the world.

If at all, the slowness with which their reputation is dying makes me happy - because though they are capable of having highest success rate in creating start ups, unfortunately not all of them will succeed in building their own company. And it will be a sad world if these people are not allowed in established companies to make the changes that can swing the world in the organization's favor.
Welcome to the club. If you haven't already, come check out MomsWithApps.com and the associated forums and Facebook group. It's not just moms but a lot of indie mobile app developers. Most members are in the educational market but many have apps in other areas. There are increasing efforts to cross-promote apps.
fwiw, this could also be an elaborate hoax, given this facts.

E.g. a list of simple password + combinations of the above simple password+"linkedin" variations.
Like every other software market, outsourcing firms are eating up the bottom end of the iOS development market at rates far below that. But I imagine if you can cultivate the right kind of local clients you can do well.

Since you mention it, if anybody needs some freelance help with an app I'm available. As a self-outsourced American currently living in Vietnam I can significantly undercut $150/hr. ;)
RIP ... He filled my later elementary school and junior high years with possibilities.
Hoe evenwichtsstoornissen voorkomen? TODIO.NL
BlogWorld 2012 Expo Day 1 Recap: Why Shakespeare Went Viral
Of course, now their password change script is broken/overloaded.
I do not understand your last paragraph. Don't your wrapper scripts have "#!/bin/sh" at the top?
The Country With the Worst Youth Unemployment Is...
> except that it generally uses something like iCloud or Dropbox to sync the passwords, so there's still a single point of failure

No. This is the strength of two-factor authentication, something you know, and something you have. If someone gets your 1Password keyfile, it's useless without your decrypting password.
Info seems a bit fuzzy, does it look like the chip will be capable of ipv6?
Is there any possibility to provide vi mode? Like 'set -o vi' in bash.
Old models of education versus "The new shiny"
Ditto here. I gave up in 3 tries.
Log Everything in JSON
Sparrow is an email application for OSX and the iPhone.
Muttonchops, yet another javascript templating engine, inspired by Django
While not entirely random, would a "date based" salt work as well? Say, the date that the entry was added? This would still negate rainbow tables as a specific user entry needs to be targeted.
It should be there if you've installed fishfish, if you feel it's a bug please consider opening an issue on github : https://github.com/ridiculousfish/fishfish/issues
How on earth were they not salting? There are so many open source auth systems now that get all the basics right. Someone who works at a big company like this and has any insight, please comment. How is this even possible in these days?
Google "cops close down lemonade stand" 165,000 hits
I have a very unique strong password on LinkedIn, and it is on the list. Given that, this is no hoax.
I would disagree..On occasions where I have been asked to pair program with one of their developers, it is definitely more optimal to use your own machine (E.g. my mac has natural sense scrolling turned off, caps lock and ctrl swapped etc). Also, nowadays, I have been seeing interviewers who ask me if I want to write code on a laptop rather than at a whiteboard. This is a welcome trend (but seen only in startups though)