skysight-inc/HackerNews huggingface dataset:
I have to admit that more than anyone else, Amy and Patrick inspired me to create my minimum viable product, https://www.pageblox.com which is currently an html/css layout creator. It may end up turning into a CMS, or evolve into a feature-rich web design tool.
I launched several months ago and am putting in time every day (except Sundays). It hasn't been easy, but once you establish momentum, it's hard to stop. I, however have not quit my job (I am very risk averse). The podcast Startups for the Rest of Us and the book "Start Small, Stay Small" are probably the best resources for learning how to build your own products...

My advice to someone looking to start something on the side: don't quit your job, but find a low-stress job at a large corporation with normal 8 hour workdays and a short commute.
New Windows Azure goes all-SSD to one-up Amazon in the cloud
http://www.cloudsigma.com/en/blog/2012/05/14/35-the-next-best-thing-in-cloud-storage ..next step!
Because someone paid for it, and more than one person watching at one location is factored into the price.
IPhone Application Development Services Chicago Illinois
iPhone application development company in Chicago provides iphone application development services at competitive rates. Hire our professional iPhone app developers for your customized iphone apps development.
Spock and Roo - More Complex Mocks
I really don't think these will help you that much. It's better to have a project in your git hub repo or some open source experience.
I used this in the past as well. But then started thinking about what non-critical is. As a "internet professional", even my Facebook account being compromised would be negative impact on my image; on LinkedIN doubly so due to it's professional character. So I basically decided that I'm not going to distinguish at all (sliding slope) and just have randomly generated passwords for all sites (not for my Mac though, too much hassle/attack vectors are different).

Safe >> Sorry

EDIT: Just checked, and my randomly generated password is in the leaked list of hashed passwords. I'm not using that same password anywhere else, so the source MUST be LinkedIN through whatever means (or it's some Mac/PC based attack vector, and these folks only leaked LinkedIN accounts which sounds very implausible).
Manipulating HTML5′s native audio with JavaScript
HTML5’s native audio element will be a great way to avoid having to rely on third party plug-ins like QuickTime and Flash. The latest web browsers like Chrome 10+ and Firefox 3.6+ are already there with imbedded javascript libraries which provide methods and properties for manipulating the <audio> element. In this post, we’ll examine a few of the most important methods and discover ways to use Javascript to run audio files.
But of course the problem is when you place so much emphasis on an artificial exam, you create a large incentive for administrators to interfere with classroom instruction in order to try and cater to the test. This is especially bad when you have poor tests.
How would one cross-reference this list unless you're storing the plain text passwords?
So now it's "curtailing liberties" to ask someone to pay for value they are provided.

Right.
Google once forced a password reset for emails/passwords that leaked from a bitcoin forum.
Latest viruses could mean ‘end of world as we know it'
The primary problem with using either as a password hash is their speed.
Possible that they only uploaded the "hard" ones.
Looks from other comments here that people have found their own passwords, unsalted.
RIAA Wants Search Engines to Censor 'Pirate Sites'
This is no different. The onus is on the person renting out their property/room to declare rental income and remit the appropriate taxes.

On a side note, it breaks my heart to read "all this money changing hands without being taxed sure seems weird."
When Antivirus Fails, All Is Not Lost
Ultimately, the best solution for audiences and companies is to simulcast the episode on TV and online. If you're a paid subscriber you can watch it for no additional charge; otherwise, the cost is $3 (or whatever).
Hey! I'm a co-founder of Kickfolio, one of Melbourne's own AngelCube startups. A friend just messaged to tell me you said you 'really need to make a promo page for your apps'. Thought it might be cool to point you to http://kickfolio.com. We're in open beta - please let us know what you think, if it does help you!

Congrats on the success of your apps on the app store and good luck with your upcoming venture.
Show HN, my first iOS app: Zen Log - A new and intuitive take on self-tracking
Out of curiosity: if you use 1Password, why are you reusing a password across critical sites?
Isn't this entire shell an extra? I wouldn't replace bash with it, it seems more like a nicer interactive frontend but you could always drop down to bash if it didn't work for something. Sort of like KDE being a more fully-featured frontend to X, but you can drop back to Fluxbox if you want to test X without all the gizmos.
VC Brad Feld's Thoughts on Technology, Life and Master Yoda
That would be fine, since you compensated the people who made the experience possible, as they have very clearly asked you to do.

No offense, but this stuff is not a complicated moral dilemma by any means.
Facebook do have access to Skype via Microsoft.

I do not know so much about Flash Multicast but this is not IP multicast, right? it is more like: Application Layer Multicast which is peer-to-peer but like a star or mesh or tree type of topology.

If Airtime is one person talking to another it does not really need multicast but just be peer to peer. However, if it is similar to hangouts then at some point (or at some degree of users in a chat room) you'll need to introduce a central server or need a tree type of topology to distribute
video (especially when users have asymmetric uplink and downlink throughputs).
I've taught myself to type without looking on my Android (holding it portrait too, not landscape). I do rely pretty heavily on the auto-correct feature to help prevent gibberish, though.
My password shouldn't be easy, and wasn't in the list.
I initially thought so too, but I found the same result -- loading indexes later gave little or no improvement in import speed. Sometimes it can even be a penalty. This actually makes sense though:

InnoDB secondary indexes are just additional B-trees, with the key storing the indexed columns and the leaf nodes storing the full primary key (I think minus any redundant columns with the index, but don't quote me on that).

When doing a huge import, you always want to do it in order, since InnoDB's clustered indexes mean that the main table data is stored in primary key order. So you don't get B-tree page splits in the primary data structure while doing a sequential import.

Secondary indexes, however, won't have this benefit. Their insertion will effectively be random I/O with lots of page splits and fragmentation. This will be equally true whether you build them at import time or build them later. In both cases, MySQL doesn't have the data ordered by the new secondary index yet until it has built the index.

Building secondary indexes at import time also benefits from being able to do a chunked concurrent import (multiple LOAD DATA INFILE queries at once). On my hardware I've found this will build a secondary index on a standby slave much faster than an ALTER TABLE will, since an ALTER TABLE rewrites the entire table, in 5.1 anyway.

So actually when adding indexes to existing large tables, I sometimes dump out all the data in parallel INTO OUTFILE queries, drop the table, recreate the table with the new indexes in the DDL, and then re-import all the data with parallel LOAD DATA INFILE queries. As a bonus this also defragments. That said, a single ALTER TABLE is a lot less human work, if you haven't automated your imports and exports.
"Great thing" is sarcasm.
The released passwords are hashed with SHA1. Assuming you use the same algorithm and linkedin does not use a salt (they probably do), then you could just compare the hashes.
Well, the normal tab-based autocompletion works like you'd expect. You can go backwards in history the same way you do with the up arrow by using CTRL+P, and CTRL+N is the same as down arrow.
New Set and Map API in javascript
One problems with carbs though, particularly carbs that break down fast in the body (say, rice or honey) is that they do cause insulin spikes and blood sugar drops, which can often lead to additional consumption. Carbs are unique in this regard though to varying degrees: coconut sugar seems to have very little of this effect while rice is very bad. There's a reason why Chinese food is associated with folks being hungry an hour after eating.

However, I think the real harm comes from combining the carb boom-and-bust blood sugar cycle with high diets where it's easy to eat lots of calories, and when you add a sedentary life style by historical terms, it gets even worse.

A hundred and fifty years ago, the average Irish peasant would have eaten 12 pounds of potatoes every day. That's almost 5000 calories just from the potatoes (and now add a small amount of dairy, veggies, and eggs).

So it's not just one thing. It's the emphasis on carbs, the concentrated energy foods, and the fact that we drive in cars and dont walk that much and certainly don't try to grow our own food in marginal rocky soil.....

Edit: I always wondered why Javanese food is traditionally so sweet without a lot of people being obese. It turns out that the biggest sweatener used is coconut sugar, which has a glycemic index of something like 35. That's a bit higher than whole barley but quite a bit lower than wheat.....
Is TV about to implode?
Maybe he was implying that they and Good Guys Startupers use hashes from raw passwords. I hope that is not true.

edit: From reading comments bellow I learned that LinkedIn indeed didn't salt.
can zsh autocomplete man pages?
Rumor: LinkedIn Hacked - Password Hashes Dumped on Russian Forum
The module certainly looks neat, but being designed to use the manufacturer's "secure, reliable, distributed internet service" makes it appear to be useless for disconnected applications. Not every application of Wifi involves networks connected to the Internet.
They spend time building useful things rather than getting caught up in online discussion forums.
Am I glad that I use LastPass and have a different, 12-character password for every service?

Why, yes, yes, I am. I've now changed my LinkedIn password, too, just in case.
I think it could work. I think it might have to be more "social" than current deal sites like GroupOn.

Quick idea: users could have profile pages that list the deals they have gotten and have a one line and 5 star rating for the deal/startup.
I wonder, why do people saying "just use bcrypt" never, ever bother to elaborate on what benefits it has, and which of them are relevant to the subject of the conversation? Believing in some function without understanding implications of its use does very little for real security.
Define "better".

If these telescopes have to be equipped with instruments, what is left? The optical system? Thats nothing compared to the instruments.

Better in terms of optical system would mean an order of magnitude at least. This is obsolete, more or less, because ground based instruments come closer to a proper correction of atmospheric turbulences. They are cheaper to build and cheaper to run. The next generation optical space telescope may be a very long baseline interferometer. This cannot be build on earth.

Infrared is also a space domain. Thats why Herschel, ISO, Spitzer and James W. Webb are space telescopes.
Assuming the pirate bought the disc as a penance/feelgood/whatever for downloading the media, this totally negates that whole motivation. To the studio/network, two people got to see the content for the price of one. Ironically, the giftee becomes the beneficiary of the piracy, but with none of the risk. And the pirate, who assumed all the risk, was the person who paid for it.
I'm guessing an infrared laser would work as well and wouldn't ruin the theme.
What a product development has to do with RoR?
You can't compare the hashes unless you have access to the clear passwords of your users. Unless you mean to do the comparison just as they log in. Seems like a lot of hassle for not much though.
I will not buy cable tv. Any information service (tv, voice, whatever) is only interesting to me if it's delivered over internet protocol.

If a lot more people made this decision, there would be no problem here.
The rar with ~100k cracked passwords in it. If you tried to find your own, perhaps you're one of the ~144 million accounts that wasn't published?

Edit: I'm not sure I understand what you mean - there was 100k passwords in one file, already cracked, and another with all 6.5M hashes. I found my hash in the hashes file.
you'd compare the hashes in your database with those from the file. The users with a hash contained in the file would be notified.

Because the passwords aren't salted(stupid), you might get multiple hits for the same hash(for example, for the good old "1234" password), meaning you might end up contacting more users than actually affected. Better safe than sorry.
Very good point. Although some sites have password rules that would prevent those.
What's causing you to have to retype passwords every few hours?

If you're doing something that makes that normal procedure, consider using the browser inside 1Password for iOS.
I love a bit of tasteful sarcasm in marketing.
People are interested in sports as a demonstration of skill, not of raw physical prowess. That is why golf has it's own channel on TV and distance running is more or less completely absent from TV.

There are some interesting facts in the article, but the only absurdity is the idea that animals being able to run fast has anything to do with professional sports.
LinkedIn allows you to sign in using any of your verified email addresses, so it seems likely that the usernames are at least stored in a different table.
LinkedIn passwords are not salted. You can only make comparisons if your database contains unsalted passwords. And if both databases used salted-passwords, then you still can't compare unless you all shared the same salting key.
The dump is not complete -- my password is also missing. As other people said, that file contains about 6.5 million hashes, while LinkedIn has 30 times more users.

Considering how usernames weren't leaked, there's a big chance that the intruder is just sitting on them and the other passwords.
Udacity: Secondary school student challenge
Who do you think is responsible for the virus?
Here: http://osgameclones.com - with "0 AD" included!
IPv6 Day: Only the Biggest Change to the Internet Since Its Inception
I don't have an iPhone to try your app out, but I just wanted to say I love your app icon!
What if we continue this trend of just doing technically illegal things on a massive scale?

New sites we can make: food2u - browse local bored people with kitchens and have them make then deliver food to you; movr - rent (unlicensed, uninsured) people with large vehicles to transport your stuff; qwikcut - find people who cut hair at home; friendzzzz (four Z's) - substitute someone bored instead of a licensed home care nurse; bugoot - find people with excess bugspray to treat your residence; talkerr - find a non-licensed person to share your problems with instead of a school'd therapist.

I wouldn't be surprised if half of those are billion dollar companies waiting to happen.
IPv6 day and the state of the edge
That only makes sense if the tax money goes to the artists, to offset the income they lose from selling copies.
Even more important to change password on other sites if you use the same email/password combo there
Google Apps Developer Challenge 2012
I wrote a short article about this kind of stuff - if it's really my data, then let me use my lock on it : http://ragmondocom.appspot.com/2012/03/My-Stuff-My-Lock

Then I get to choose what strength lock I put on it.
Your Side Project is Bullshit
SEO BALI
Why would anyone write a 3d renderer in Java? Anything slower than C++ is unacceptable in this field.
There's no reason middle-click shouldn't be paste on PuTTY -- it's a configuration option.
The BackTrack Linux 5r2
Deposits just make sense.
It would still take a moderate amount of time for a single password if it's long and complex -- you're essentially generating the rainbow table. You might as well just download a sha1 rainbow table and just perform a O(1) lookup. You could reverse all the 6.5M password hashes in mere seconds.
I'm even happier I don't have a LinkedIn account.
The pattern 000000a9 is just in presentation - I counted the occurrences of different bytes in that position (also misled by the apparent pattern, where many lines in a row would have the same 4th byte), and each possible value is present more or less equally often.

It seems like it's just sha1.

EDIT: however, 3.5 million hashes start with 5 zeroes, which is way too many for just coincidence. Possibly they used multiple hash functions?
Is there at all a system to try to compare studies or evaluate how apples to apples they are?
It's hard to say. A single-threaded import might not be saturating any particular hardware component; there's other overhead in the work. And when you account for multiple CPUs and multi-disk RAID arrays, the picture gets more complicated.

InnoDB journals data. It's writing the data sequentially and then later arranging it to the correct place, which will also be sequential by primary key. So if you're loading in a bunch of sequential chunks in parallel, I imagine InnoDB can probably order the final B-Tree writes so that they also end up being sequential, even if the initial writes to its logfile ended up being interleaved.
Surf Air Raises Series A for “Netflix for Air Travel” from Jared Leto & others
The Five Orders of Ignorance – Phillip G. Armour
Why would you use the email? Mostly when passwords/usernames are stolen the email is there too. For my site I have an unique 128-bit token for every user. I also have a 128-bit site_key (which is in the application, not db) and mix those with the password and then hash.
Another good one, yeah. Basically I was just once again abusing HN as my personal bookmarking tool -- so that, when the time comes to learn from their open sources, I won't have a hard time remembering the name of the project.

Wow, LuxRender really does look so promising. Probably I can really skip Sunflow and dive right into Lux. 4-5 years in graphics algorithms is an eternity, after all (which is both wonderful and annoying)...
Amazing Facebook Twitter App
Yes it can. Add something like this to your zsh config:

zstyle ':completion:*:manuals' separate-sections true
zstyle ':completion:*:manuals.*' insert-sections true
zstyle ':completion:*:man:*' menu yes select
"We were curious what would happen to our share price if our company did something incredibly stupid"

The above comment might seem incredibly harsh, but really, there's no good excuse for a site this prominent to not have a salted, secure password hashing system. Even if they started with an unsalted password system, users can be migrated to the newer more secure system on next login.

The only way I could regain respect for LinkedIn is if we find that these unsalted hashes were from users who never logged in to LinkedIn after the security upgrade. From the replies of other HN users who have found their password hashes in the leaked list, this doesn't seem to be the case though.

I can understand database leaks. Bad things happen. Not being prepared for such an event however is where I draw the line. These leaks impact users far beyond just the site at fault.

It's not enough to say users should use LastPass. They don't, and that's the world we live in, for better or worse.
If computer security doesn't take into account problematic users, then it's flawed computer security.
i agree, but think about the backlash this would create amongst the userbase. the majority of the users will probably never even realize / read that their passwords have been stolen and thus linkedin probably does best in keeping a low profile about this (and start from now on using a better encryption). this is obviously not in the interest of the users, but it is in the interest of linkedin.
Then the password has to be updated whenever your email changes. I believe Amazon does it like that, literally "forking" whenever you change password; at one point it was possible to simply log on with the old password and live an "alternate reality" where all changes you'd done after changing pwd had not been applied. Don't know if it's still the case today.
The economics of password crackers changed and rainbow tables are pretty much obsolete nowadays. See http://www.codinghorror.com/blog/2012/04/speed-hashing.html section "What about rainbow tables?".
Discipline vs. Organization
Yes. zsh can also auto-complete command line arguments for a lot of commonly used commands (including the GNU utilities, git, mutt, mplayer, imagemagick's convert and others.)
The Bully’s | Socyberty
New way to advertise on youtube?
If immutable objects are good, why do people keep creating mutable objects?
Sounds like there's no reason for me to switch.

I've already messed with configs and everything is stable now, so that's a sunk cost.

I already know bourne-style syntax, so learning fish (even if it's easier) is an added cost, not to mention the fact that I have to work on various boxes that I can't install fish on so it's easier to have my fingers know how to operate a single shell (zsh) that's generally backwards-compatible with bash (which is ubiquitous).
That's easy to do it you have the email addresses, but impossible to do if you only have the SHA-1 hash, as in this case (unless you're also using unsalted SHA-1 hashes, which is a much bigger issue by itself).
Goldmansachs/gs-collections · GitHub
My specific example was you can get more context about something you've never seen before, potentially getting a personalized tour, before you go.

Sorta like what we're doing now, but with video. Is that scary to you?
Better Guy Startup Founder would be using salted hashes anyway and wouldn't even be able to run a cross-reference.
I took time to word what I said, to match what I mean. It seems that what you read, were ones that you seem to have injected in.

It would be nice to know exactly what precautions are taken to prevent access from insiders. You may work for FB, but is storage or backups part of your role? Not that I think you have to be, how would I know as an outsider. Maybe as a developer you know how things are setup, and how well people adhere to policies.

And I'm curious, what are those? If users' data is taken seriously then wouldn't they make difficult to prevent casual snooping across the database? So that even if you had root access you couldn't get to it as an insider?

Probably not. The data is meant to feed an ad/marketing machine so, how locked down could the data be internally?

I don't expect these questions to be answered, but just throwing them out there in an attempt to reason things out.
Capitalism to the extreme
So we've taken capitalism to the extreme and become a consumer led society.

We track spending as a measure of growth, which then becomes the basis for whether we are doing well or not. Funny, isn't it?

Is there an end goal? Nope, just keep spending please.

If you run out of cash, borrow.

If you cannot borrow anymore, don't worry, we will print more notes to devalue your debt. So all those who have savings either lose their money while it sits in the bank, or they spend it.

What do they say? If you cannot beat them, join them?

So, we are all consumers. Anyone know what item we consume the most?
You'd do it at login time. User enters user/pwd -> hash with unsalted sha-1, check if in list -> if yes, alert to change / if no, proceed with normal hashing.