skysight-inc/HackerNews huggingface dataset:
I believe they mean hashed (as pointed out later in the article) but if it was encryption I'd disagree pretty strongly with the assertion it's safer than straight hashing.

If you don't need the original password, hashing should be used, not encryption. Hashing means there is no issue of key management as is the case with the encryption system. If those keys are mishandled then it's trivial to recover all the plaintext passwords.

Decryption would be difficult without the keys, but it's likely that (a) they have keys stored somewhere insecure or (b) they'd perform the encryption with a single key for all passwords. For (b), this means you simply had to have a valid account and you'd have a plaintext-ciphertext pair to bruteforce. Once that single key is extracted you'd have access to all the other passwords as well.
In my experience, the main reason is any ad content you're serving. If an ad network's content times out (which I've seen happen for hours at a time, multiple times a year), your page might take 30 seconds until it fires the DOM ready.

At one company I worked at, the ad network we used got so bad that we not only executed all our JavaScript at the bottom of every page (instead of in the DOM ready), but also only loaded the ads after that, and then dynamicaly repositioned them to the "inline" spots where they supposed to appear.
I'm really happy that this is on the front page. This sort of tangential wisdom makes me a better builder than many acute technical posts do.
Canada's warrantless surveillance bill is back
Being able to compile code and reload it while the engine is running is something that has existed in many engines for several years. What's cool here is that the engine keeps running while editing and compiling, then it auto-reloads and pushes the changes when compiled.
"It's pervasive in conversations I've been having recently as well"

It's so much easier to do this as a result of information so readily available at your finger tip. So any statement anyone makes can be quickly verified and corrected with pretty good precision. Wondering if the people who corrected you in conversations looked up the fact on their iphone (or whatever) while you weren't looking.
My point exactly that it is a common myth that even using a tiny subset of features needed for a complete beginner is somehow more complex in emacs than in other editors (gedit in this case).
It's also quite tricky to explain to your investors and your customers that your password database was stolen.

Maybe some day there will be "Security as a Service" where someone helps you do this properly.
Doesn't seem to be working in Safari.
It is really kind-of very good practice to salt passwords. We've talked a bit about this recently here on HN:

http://queue.acm.org/detail.cfm?id=2254400

http://news.ycombinator.com/item?id=4082746
Looks like it's only the EU databases that were compromised, so if you have an NA account like I imagine most people here here would, no need to panic (though changing your password anyway won't hurt anybody).
Why would I use this when I can already connect to Excel using PyWin32+COM and be able to interact with Excel in Python for free?

FTFY
Opera CEO Not Interested in Facebook Take Over
Probably because at the times vacancies have existed he was not the strategically optimal candidate in the President's political maneuvering?
Yes. A great, practical and scalable example is found in ssh: http://en.wikipedia.org/wiki/Secure_Shell#Key_management I'll try to explain how it works in non-technical terms (so please don't nitpick as I'm glossing over details)

User generates a public and private keypair. The public key is given to the remote site (such as LoL or Linkedin), but the public key is not secret -- it is public. You can post it on your blog, whatever. You can use it for multiple accounts without concern.

The public key allows one to encrypt some data, but the public key cannot decrypt the data.

The private key can decrypt the data.

When the user wishes to log in the remote site, using the public key, encrypts a random string and sends it to the user. If the user manages to successfully decrypt this random string and send it back then the remote site can infer that the user holds the private key -- because only the private key can perform the decryption.

The private key is never sent to a remote party. Only meaningless random strings are communicated over the wire.

The (significant) drawback to this method is that the user will have to have the private key with them in order to perform the authentication. But perhaps mobile devices will solve that problem for us.
I Have My Own Internet.  No One Else May Go There.
I don't understand where Rogue Amoeba is coming from here.

They don't have a "right" to be on the App Store. It's Apple's store ergo their rules. And everybody knows that the rules are more guidelines and Apple can and will change their mind about them at any time. Especially if you try and undermine them e.g. by using their private encryption key.

Does it suck. Absolutely. Is it unfair. Probably. But this has been the game for the last 3 years and Rogue Amoeba should not act surprised.
I would love to see an ssh-like key exchange built into browsers. You add your key to the site, GitHub style, and then you use that for auth. No more nonsense with OAuth or "remember my password" or the remote site having your password just because they grabbed the DB. It's just a useless public key to them.
If you liked this, I highly recommend reading Stephen King's "On Writing"

http://www.goodreads.com/book/show/10569.On_Writing
CFO asks his CEO, "What happens if we invest in developing our people and then they leave the company?"
CEO answers, "What happens if we don't, and they stay?"
Removing an app from the store is one thing. Bending the truth or outright lying to your own customers in order to deflect blame for a decision that you made arbitrarily is entirely another. The fact that this nonsense is coming from a high-level Apple employee and not some customer service rep who can claim not to have known the truth makes it worse.
It's more than just the money. VC many times have connections in various industries that can help you succeed.
Thanks for this - it indeed looks much more powerful (being able to interact with Excel using Python as well as making python functions available to Excel).

Just saw this example - http://dpinte.wordpress.com/2010/03/12/interactive-python-gr...
In this case the job is software developer. For almost any skill, being smart and sociable is enough. But not software 'construction' or programming or whatever you want to call it. This skill differentiates a very valuable employee from one that is still very valuable but can't create software. A very high number of people who aren't skilled at all try to get these jobs hoping its not really that big of a deal and they plan to fake their way through a job creating more work for the employees with these skills. Would you hire a physician just because they are friendly and show interest in cutting someone open?

Companies can do what they want. if they just want people in seats to follow some acquisition strategy, then good for them. But anyone who is honestly trying to make a career of software development should learn the language, tools, idioms, and techniques.

Btw, I've been studying programming for 20 years but would not apply for a Python job because my skills are not current. I would take a minimum of six months before I got to a level where I would consider applying.
Buy Cheap Nike Foamposite One Metallic Red Mens Shoe for Sale
Vundle - Vim Plugin Manager
I am guessing EIR is one such initiative to speed up the solution for this problem?

http://www.whitehouse.gov/blog/2012/04/19/entrepreneurs-resi...

http://www.uscis.gov/eir
How a 1-man cat-drawing startup won a Mark Cuban investment
"it's another to put down others, belittle them, or critique their opinions because of a perceived mistake they made (such as the geometry)"

I would guess that people who are in certain professions which require precision would be more likely to act this way. Because lack of precision would cause the plane to crash or the bridge to fail or the code to croak. Medicine (drugs) for example is not really super precise when you think about it. Dosing isn't so critical that if you take a little more or a little less you end up dead or sick. You have latitude. (Of course someone who knows more than I about this would point out that coumadin (Warfarin) dosing is quite critical and correct me.)

Have you found that to be the case in your IRL conversations?
I would like to know what happened to the other 20%
Embeddable Common Lisp
Sortfolio auction ends with no bidders
Hey, glad I was able to give you some useful information! If you ever find yourself in Toronto, say, for an indie game jam (http://www.tojam.ca/home/default.asp hint hint), you can buy me a beer ;)

If you're looking for something lower level, the book you probably want is the white book - Computer Graphics: Principles and Practice. I have the 2nd edition from 1992, which is the still the standard intro graphics textbook for many CS departments. Though Amazon says there will be a 3rd edition coming out at the end of this year!

http://www.amazon.com/Computer-Graphics-Principles-Practice-...

Another highly recommended book (also recommended in another comment here) is Real-Time Rendering, but I've only used bits and pieces from this one, so I don't know how good it is for folks just starting out. Still probably one you'll want to add to your shelf if you continue on in the field.

http://www.amazon.com/Real-Time-Rendering-Tomas-MOller/dp/15...

Oh, and also also, head over to YouTube with some snacks and a drink, sit down, and watch the weekly Overgrowth game developer videos from Wolfire Games. It's both inspirational to see what other people are doing, and a great demo of concepts that you'll read about in GEA, such as animation blending: http://www.youtube.com/playlist?list=PLA17B3FAA1DA374F3&...
I don't think they're making the right case in that response. It should be focused solely on the "this should be allowed by Apple" argument, because telling users that it's not illegal doesn't matter when it's Apple's store and Apple's rules, for better or for worse. They say that the encryption around AirPlay streams appears to primarily be there to prevent third parties from creating applications that work with AirPlay—so it's easy to assume that Apple wouldn't approve of something they tried to prevent.

Is releasing something you know will get kicked out the best approach to take when you can't provide an approved solution? Maybe, if you think the resulting discussion and PR is your best chance at getting things changed... but then, again, you need to keep your message perfectly focused. Claiming that they didn't violate any agreements feels too defensive to me.

EDIT: and it's not just this response... initially they professed something much closer to ignorance/surprised innocence over the removal, while it now looks like there wasn't much reason for any surprise.
Federated identity doesn't replace passwords, it just punts the whole process of authentication to a third party. That third party will still need to authenticate the user somehow, which brings us right back where we started.
Well, to be pedantic, there's no such thing as a "diablo 3" password, only a battle.net password. A WoW account is more lucrative.
BISE Malakand Board Matric Result 2012
That is an admission, otherwise this act would be futile.

"We think someone stole animals from our pet shop, so we compared the empty cages to filled ones to figure out..."
I agree that it is ridiculous the way Apple basically changes the rules as it goes along. I just don't understand the outrage or surprise. There has been 3 years of developers trying to bend the rules and posting complaints like this.

FACT: They reverse engineered Apple's proprietary technology and want Apple to help sell their app.

MY POINT: You must be nuts if you think that will happen.
incredible!

can someone explain how the long exposure shot is taken, where the local light object (bulb) is not overexposed? everything seems to be perfectly exposed.

the only thing i can think of was that this image was constructed from multiple shots taken at different exposures.
Dietcet.cgg.gov.in - Official website for Download DIETCET 2012 Hall Ticket 
Candidates, who registered for AP DIET-CET Exam 2012, can download now their Hall Tickets from www dietcet cgg gov in. District Institutes of Education and Training Common Entrance Test DIET-CET 2012 is organizing by Govt. of AP.
Top 5 out of 8 wouldn't be doing so well... but the point here is not about absolute numbers of people migrating, its about the types. Does the US want entrepreneurs or just those with family members?
We can't actually tell much about their password storage mechanism from that post. For one, they mention "encrypted hashes", which might mean encryption, might mean hashes, or might mean both; for two, they don't describe how they determined which users had weak passwords. If they were using some kind of reversible encryption scheme, it's possible that they ran that function against their database and determined common passwords that way.

I'll give them the benefit of the doubt, unlikely as it may be, because if they were in fact doing something as stupid as SHA1 or MD5 or ROT13, and they still opened their post with "Keeping player information secure is very important to Riot", then somebody needs to be strangled as an example to other mealy-mouths.

I also take issue with telling your users what kind of passwords to use. If you're storing passwords correctly, and if you're blocking brute force attempts, it almost doesn't matter what password your users are using. (Almost: somebody could still try "password" on an account and get lucky if it's one of the 10,000 accounts with that password.)
Yes, this story has already been posted many times, thanks.
Could change your handle?

Would you change yours if I changed mine? My screen name here comes from another site, where it was mandatory to use screen names (I'm actually more accustomed to online interaction with my real name and other people who use their real names), and then I carried it over to another site I heard about on the first site, and then over to here. I chose the screen name on the original site (the Art of Problem Solving site) because literally there a great many participants are young people below the age of majority, and it was useful there to distinguish who was an adult. At the second site where I used this screen name, I was again among users of mixed ages, with many minors participating, and it seemed helpful to keep this same screen name. On both of those online forums, most participants have correctly picked up the implication that "token" is part of my screen name to remove offense from the "adult" part of my screen name, by self-deprecation.

http://en.wikipedia.org/wiki/Self-deprecation

http://en.wikipedia.org/wiki/Tokenism

I kept the screen name here (although I could just as well have used my real name) simply by Occam's Razor, not desiring to choose a new screen name in case anyone recognized me from AoPS over here.

I automatically vote down everything I see by you.

I had no idea I have such a persistent fan club. I upvote based on the content of comments rather than on the screen name of the person commenting. I'm happy to hear from other users here any time they think I have given offense. I beg your pardon for any offense I have inadvertently caused by my choice of screen name here back 1300 days ago (just shortly before you came on board, it appears). I cherish the opportunity to learn from you and from other participants, and look forward to seeing your further comments.

P.S. Previous HN polls about participant ages suggest the age range here is almost entirely above the age of majority but almost entirely below my age. I have commented on the lack of sure-fire assurance that anyone here knows the full details of the age distribution here.

http://news.ycombinator.com/item?id=2322237

P.P.S. I'm sure there are other examples, but my family is the only example I know of personally of two generations both participating on HN. My adult son is rather busy with his work this summer, but he has posted here from time to time and often exceeds me in average comment karma score, I think.
What? Schiller lays out the reasons the app was rejected quite clearly. Rogue's response is to suggest that these issues are ambiguous because it hasn't been clearly defined by Apple. Well, guess what, now it has. Rogue should've just let it go.
I moved to the US from Britain. Trust me social support is much much better back home. If I wanted to be lazy I'd have stayed there.
Icenium - Cross-Platform Mobile Development Simplified
> we haven't had a vaccine for the last 10,000 years of human civilisation, so what's another 10?

Terry Pratchett.

Him and who else? Whose grandmother? It takes time to make sure these things are safe and statistically likely to work, but it can't possibly come too soon.
In a Stanford lecture, Tina Seelig said something along the lines of: find where your interests, what your good at, and the market (ie someone will pay you) intersects and do that. I've always liked that advice.
I would disagree, and say that proficiency in any given career is necessary, rather than just "being smart and sociable." And a valuable employee is a valuable employee. If they have ability, whether latent or developed, they have ability. if they have exceptional promise, bringing them on early will likely pay dividends later, even if there is a greater up-front cost. The problem is it's an investment, much like the stock market. And like in the stock market, you have investors with good and bad insight. It's all a game, in all honesty, though, and it usually comes down to saying the right things (which is why so many people bullshit their way through interviews and have no skills, and why many people with actual skills don't make it through -- they don't have the bullshit skills).

edit:
> A very high number of people who aren't skilled at all try to get these jobs hoping its not really that big of a deal and they plan to fake their way through a job creating more work for the employees with these skills

This is absolutely true in every industry. EVERY industry.
Probably, from the original set posted to flickr:

“My star trail images are made by taking a time exposure of about 10 to 15 minutes. However, with modern digital cameras, 30 seconds is about the longest exposure possible, due to electronic detector noise effectively snowing out the image. To achieve the longer exposures I do what many amateur astronomers do. I take multiple 30-second exposures, then ‘stack’ them using imaging software, thus producing the longer exposure.”

http://www.flickr.com/photos/nasa_jsc_photo/sets/72157629726...
A couple of problems with your comments. The first is that it's not an either/or, you can have both. The second is that recording the dismissal isn't going to cause that much of a problem when it comes to morale, because the person affected is no longer working there. Another issue is that recording the meeting protects both parties from later fabrications made by the other; the dismissed employee could make it a condition that a copy is given, or set up their own recording easily, given smartphones today.

Recording a meeting which involves emotional distress is not 'shockingly negative and dissonant'. It's wise for both parties, just like having a witness is. I was recently made redundant, and although we didn't record the meeting, my employer advised who their witness would be, and allowed me to choose one of my own. The idea is to have a more neutral record for backup than the two main parties at an emotional time, and a video recording assists just like having a witness does.
There is also the O1 visa which is possible albeit with a great deal of work, it's almost like a second job!
CoCoon launches to cultivate entrepreneurs
Goading Apple into breaking their own rules is a bit trollish, but when all else has failed maybe trolling is what we need.
Having lived through it, the problem that Java uniquely solved in the '90s was that software companiesn had fallen in love with OO but C++ was too complicated for developers to use safely, with pointers vs. references problems, operator overloading (IIRC, the Zapp framework overloaded ++ to add items to a menu), and lack of garbage collection. Java was a breath of fresh air, a language sweet spot with most of C++'s power and few of its drawbacks.
Ponzify: Silicon Valley's next hot IPO
Substantial depends on the type of business you want to setup, there is no scale. For an early stage internet company it's certainly possible with 100k
I never finished Braid, good to know!

Yeah, I think Hammerfight is a pretty finicky game. It worked well for me (built in mouse-sensitivity buttons on my mouse helped a lot), but if it hadn't, I don't think it would have been very fun. If you get it working well, though, it's an absolute blast.
Karma stopped meaning something when I realized people can blindly submit an endless stream of shit from nice safe sites as soon as the stories hit their RSS readers and rack up far more than anyone can earn through normal use.
I just don't understand the outrage or surprise.
The moment we get complacent is the moment we lose. What's the worst that can happen from trying or speaking up? At worst Apple says "no", and maybe the public becomes more aware of the situation and thus might feel compelled to apply pressure to Apple. This is the reason for the outrage.
I think gamification of SEO is killing all kinds of search, and this is part of why Google is investing in social search and G+.

Links are have more value when they're connected to a person's reputation.
As your number of staff increases, you'll find that you need to be more explicit. Real world people are complex creatures, and managing them isn't simple. What defines 'being a dipshit', for example? For some, it's being a pedant. For others, it's being slow to learn. Others think it's about obnoxiousness. Besides, rules like "fraudulent timesheets are a fireable offense" make it explicitly clear that 'we check these things', and avoid the 'but I didn't know it was wrong' excuses that you will hear with enough employees, commonsense be damned.
I've been trying to find a way to put in proper words why PHP is still this big in webdev and this article just gave me the explanation I was looking for all this time.
I don't know how you can come to the conclusion that this is an arbitrary decision by Apple, or that Apple is lying about something in the matter. It seems clear to me that even though Apple keeps using the term "approved API" what they mean is "the AirPlay encryption key that you don't have a license for". It's an odd use (or misuse) of terminology but it doesn't change the facts.
I've heard about that Nvidia project. I think they are on the right track. The only thing that's missing is enough programmers (und thus software) for this model. As an example (and I'm saying this as a layman in terms of databases) I think that DBMS might be able to profit a lot from the GPGPU based model. For high read traffic databases you could scale a system with n GPUs, based on how much "storage" the database needs (the storage being the GPU ram, continuously mirrored to harddisks when writes occur).
Hack their systems. Partially joking. But in all honesty companies have hired hackers that did built something slightly destructive (in the short term) to their website/app.

http://allfacebook.com/hacker-makes-facebook-look-like-myspa...

Disclaimer: I would just be sure that they are a very liberal startup and might appreciate a joke otherwise you might find the FBI knocking on your door.