skysight-inc/HackerNews huggingface dataset:
>This makes it no more efficient than brute forcing.

Jesus, no. It absolutely does make it more efficient than brute forcing each password.

I compute one rainbow table that I can run against 10,000 users. Or I brute force 10,000 users' passwords because they have unique salts.

>_< God, I need to just accept the fact that people are going to talk out their ass about this and stop trying to get people to spread bad, insecure information.

oh sweet jesus of irony, you're the guy that was wrapped up in Bitcoinica.
Quote: they might end up spending a lot of fruitless time trying to force Vim to follow the same model through its configuration.

Here's a fun little snippet from my .vimrc. Enjoy ;-)

" tab navigation like firefox
nmap <c-s-tab> :tabprevious<cr>
nmap <c-tab> :tabnext<cr>
map <c-s-tab> :tabprevious<cr>
map <c-tab> :tabnext<cr>
imap <c-s-tab> <esc>:tabprevious<cr>i
imap <c-tab> <esc>:tabnext<cr>i
nmap <c-t> :tabnew<cr>:e<space>
imap <c-t> <esc>:tabnew<cr>:e<space>
I wouldn't be so sure. I couldn't get a payment gateway to transfer my own stored info to another account also owned by me (to switch merchant account providers), let alone someone else. There must be a PCI rule being violated there somewhere.
The problem is that the site will lose affiliation with 37signals (which probably drives a lot of their traffic) and existing customers will have to renew their membership. It's safe to say that when buying it revenue will be significantly lower than what it's doing right now.
I would recommend "The Art of Readable Code" by Boswell. It is very well-written and enjoyable.

http://www.amazon.com/The-Readable-Code-Dustin-Boswell/dp/05...
Ms never misunderstood anything. Their goal just was another one. "people love it? Great, take all away and include a bit of that in the ultimate pro product tier. The rest will be available in an add on"
> I don't know anybody who is using Basecamp nowadays

Did I miss a joke?

Millions of people in 150,000 companies in 180 countries use Basecamp.

Basecamp.com/basecamphq.com is the 393rd highest traffic site in the US.
All except the Azure bit.
Have we had enough of these demos yet to be bored of them? The typeface and jquery effect are two different things. Frankly the header isn't even a good demo of the typeface, it's rather distracting from the quality of the typeface itself. For example, the C doesn't normally have a lighting bolt through it. The damn header doesn't even display a sentence or a full "title" to see if it would be decent as a headline font.

Muddying up your own font by overusing a jquery gimmick? I hate to be that stodgy guy because I don't have a blanket hate of jquery but it doesn't seem like the best way of displaying a typeface :/
Blizzard's writing staff would do well to brush up on these rules... Diablo 3's and SC2's writing was absolutely terrible.

Oh, George Lucas too.
TaylorMade Rescue 11
Maybe a competence between groups, with one of the rules being "the domain must start with L" :)
OR maybe just a coincidence...
maybe the site got so much traffic due to all this media attention now, that they decided to actually keep it.
Cara Menurunkan Kolesterol Tinggi
Cara Menurunkan Kolesterol Tinggi .daftar makanan:Gandum,Buncis,Wortel,Kedelai,Minyak Zaitun.Mengurangi konsumsi daging yang berlemak.AceMaxs
Cheap NIKE FREE RUN 2012 Mens, Australia Nike Free Runs Sale
Cheap NIKE FREE RUN 2012 Mens Shoes on Sale, lowest price Nike Free trainers, Nike 3.0 5.0 7.0, Nike Free Runs, FREE Shipping Nike Free Run plus shoes USA Australia outlet!
Microsoft developing Hyper-V support for OpenStack
Is it just me that reads this and is reminded of Linus/Linux ?
The 2003 Sentley Chryslental GT - It's a RepliFail
>In some part of the code (see dmap page) there are actually more comments than statements.

>Dmap source code is very well commented, just look at the amount of green: There is more comments than code !

You know, in my experience that's not a good thing. I work on similar, heavily-commented code and find it extremely painful. At some point it becomes a burden to see the code behind the comments. (And just so no one misinterprets me: I am not against comments /per se/.)

It's like when you read code written by someone who simply loved whitespace and who appended a useless "banner comment" after each real comment[1]:

// If x is less than 3, do stuff 50 times.

// -----------------------------

if ( x < 3 )

{

// While i goes from 0 to 50.

// --------------------------

for ( int i = 0; i < 50; i++ )

{

// Do stuff.

// ---------------

doStuff ( ) ;

}

}

So what would've fitted in one screen of text, if written in a sensible fashion, now requires one and a half screen and lots of scrolling.

[1] The comments in the example are actually both crappy and pointless. Sadly, the program I work on is riddled with them. Please don't write out what the programming language constructs do in English.
And from experience, a Bar/Bat Mitzvah is certainly an achievement, not merely a coming of age ceremony. It was certainly the hardest thing I'd done by that age (13), and involves leading a full service in hebrew and reading from the Torah, also in (very antiquated) hebrew.

Preparing for it involved tutoring for six months, in addition to biweekly hebrew and temple school classes for many years.
I used it back in the day and liked it. Other than being used to Basecamp, I don't really see why anybody would choose it over Asana in 2012 though. Given the choice between a free Basecamp and Asana it would still be an easy decision.
Microsoft change of heart, allows desktop apps in Visual Studio Express 2012
Reset Windows password with Linux in under 5 minutes
The analogy doesn't work. iPhone users can only get apps from the Apple store.* Also, Rogue Amoeba isn't deceiving users. People who buy Airfoil know that it's not made by Apple.

*I know someone will bring up jailbreaking. Jailbreaking is not a solution. It's difficult, voids the warranty, and can cause issues with stability and software updates. It's a non-starter for the vast majority of users. By limiting Airfoil to jailbroken phones, Apple kills 90% of Rogue Amoeba's revenue.
Microsoft extends Visual Studio Express 2012 to desktop apps
a) You have a complete misunderstanding of how patents/copyright work and why Apple is suing Samsung.

b) Christina has already mentioned that the GUI frameworks are missing which are non-trivial to implement to say the least.
A database-wide salt makes cracking the database as hard as forcing one password. You only need to do the computation once and then you have a super-quick lookup for all the other hashes. Per-entry salts totally bust that.
I think the regulatory environment for setting up a business, obtaining licenses, etc is somewhat orthogonal to how local laws and enforcement deal with (not only per letter of the law, but enforcement) fraud, spam, phishing, chargebacks, et al. I don't mean to profess complete familiarity with the matter here, but it's just one area where Braintree's difficulty is not coupled directly to the amount of FDI. My naive understanding is that at this time that these kinds of issues (such as enforcement of contracts with small entities) are still somewhat in the wild-west phase in India.

But as other posters have noticed, it does look like there is an emphasis on the EU and members of the Commonwealth. So it may just be down to the number of very distinct regulatory regimes Braintree was comfortable dealing with at the time, so this could be much speculation about nothing.
The us already has such metrics. What the anonymous economist author is advocating is reducing these criteria at which point many people can simply buy their way into the country under the guise of being an entrepreneur.
I don't see why a company can't be started with one project in mind, e.g., Light Table.

The exit might be to sell the product to a buyer once the business case is made, at which point the investors realize the capital gains.
Any thoughts about getting this up on Github ? Would definitely get you some contributors.
Learning enough git to get by takes all of 5 minutes. There's little excuse to not learn it from a consumer perspective these days.
Yeah, in my own experience TDD makes a lot more sense when you have something substantial built.. like say version1 of a product. Doing TDD from the scratch is a lot more hassle without substantial gains
Attention readers: For some reason i cannot comprehend the pages use javascript to load some images. There are no noscript elements notifying you about this. So enable javascript to read through this.
Incidentally, as the guy who started this whole thing, I'd just like to note that I actuslly agree with this. When I said they were "OK" or whatever, I meant it in the sense of "I guess it's good they're doing something," not like I'd recommend it. Please nobody get that idea.
From IRC (don't shoot the messenger, please..):

<_Christina_> no github, i dont like revision control
Related is screenwriter Terry Rossio's concept of "Impressive Failure". Essentially the idea is that characters are defined by the quality of their failures.

http://www.wordplayer.com/columns/wp08.Impressive.Failure.ht...
Github doesn't compromise the distributed nature of git. It makes it easier to use it as a traditional client-server SCM, but you can treat Github as just another remote (and I often do!)

For people coming from client-server SCMs, I think Github is a really important transition step, and frankly, as an open source developer and consumer, it's really nice that there's a popular publish/find-stuff hub.
Schedule your timing for EURO cup matches
no-one has to support it

Which is why there should be a law.

It's actually outrageous. There's a law to prohibit unsolicited telephone calls - effectively a law to prohibit annoying people. But none for prohibiting companies from invading privacy by tracking online activity without explicit permission? Insane.

I have no tears for ad networks. They need to find a new business model or be fined into bankruptcy.

(That's my conclusion, BTW. The Mozilla stuff was simply a response to your Mozilla comments. I'm sure there are a lot of nice people at Mozilla. And Google. Irrelevant.)

[Mozilla] exists to make the web a better place.

If that were true, Mozilla would be lobbying for a law.
Note: Just to make things clear, I support Apple's decision here.

You're ignoring the fact that according to your analogy, our hypothetical KFC is already allowing people to make and sell different sorts of food with KFC branding from within their store (as long as you give them some of the proceeds and pay an annual fee, which was the case). In fact, a lot of people come to KFC precisely because they have an unmatched breadth of delicious and affordable dishes, and many people want to sell their wares at KFC because of their large clientele - KFC has successfully transformed into a food-court.

The hero of your post devised a delicious dish that would lose its flavor without the KFC secret sauce, but unfortunately for him, KFC only allows condiment manufacturers to use their secret sauce, and then only after a certification process to make sure they get the unique taste just right. Of course, they could, say, taste the delicious dish, realize that it's providing them with direct revenue, as well as satisfying consumers and increasing the odds they'll return to the food-court and spend more money.

Analogies aside, I understand why Apple does these sorts of things - first of all, they want consistency in UX since there really was no certification process. Also, keeping the ecosystem tightly under their control is much easier when you're very consistent about being draconian from the moment the platform was created (you go to the app-store, you play by their rules).

As a side-note, I'm surprised that there's so much support for Apple with these sorts of things when 15-20 years ago the same crowd would have been up in arms if Microsoft were to, say, send cease & desists to Samba or Wine (and still is criticizing Microsoft for disallowing other OSes in WinRT ARM devices).
Google's cache, in case the server goes down again: http://webcache.googleusercontent.com/search?q=cache:http://...

It's strange how many people (even on HN!) don't know how to use Google's cache. You just need to type "cache:[url]" and press enter.
Maybe Meego would be a good fit ?

But if she could get this working on Android it would be huge. I guarantee you could get a million off Kickstarter if you decided to be a little evil and stoke the fanboy flames a bit on Engadget/Reddit etc.
George Lucas would probably read them like this:

#1: You admire a character for trying to be funny more than for actually being interesting.

#2: You gotta keep in mind what’s interesting to you as an audience, not what got you an actual audience. They can be v. different.

#3: Trying for theme is important, but you won’t see what the story is actually about til you’re at the end of it. Now rewrite it so Greedo shoots first.

etc...
Here, on Reddit, and I'm sure many other places, why does this need to happen on opening night? 100th Monkey-blogger theory, that the more people experience the same thing, the more likely someone is going to post to the aggregators about a blog post about demystifying something about it? At least it isn't completely like Reddit where people are putting spoilers in the posting title.
If you're new to vim: do yourself a big favor and install Janus[1]. It installs tons of useful plugins effortlessly (literally by typing ./bootstrap.sh) and saves you hours of frustration (I'm not a fan of tweaking vimrc and installing vim plugins).

[1]: https://github.com/carlhuda/janus
Check the new basecamp, it is quite nice technically.
I, for one, find Pixar's storytelling extremely naive, paint-by-numbers kind of affair.

Like past Disney without the genius (e.g Fantasia, the dark forest scene in Snow White, etc) but with more puns thrown in. Or maybe "animated ho-hum Spielberg" is more apt.

Could be OK to take your kid to, but IMHO even kids (or especially kids) deserve better.

And not to be accused that I speak without offering an alternative, I think that something like "A nightmare before Christmas" is light years ahead of Pixar's work, in storytelling, artistic vision, and even visually (and I'm not saying that because of its "dark mood". Light stories could also be told in a more artistic way than Pixar's).
I hope she changes her mind. Revision control saved many people's asses throughout history.
Do you have a more advanced tutorial? I couldn't find a more comprehensive/advanced tutorial on vim tabs this morning... Everything I found were mostly about changing keyboard mappings to ease switching between tabs or thing like that.
Übersiedlung Wien
Übersiedlungen Wien , Wir bieten Ihnen im Bereich Umsiedlungen umfassenden Service.
Für einen Privatumzug oder Unternehmensumzug, Allg. Umzug sollten Sie sich den besten Übersiedlungsunternehmer organisieren, damit Sie mit dem Umzug nicht zu viel Arbeit haben und dieser schnell und sicher verläuft.
How I salt my own passwords and sleep a little better at night
At least in that case you can attribute it to well-intentioned stupidity. Here's my favourite short example you must instead attribute to malice: [1] a closed-form implementation of fibs(n). Follow along with the comments!

1. https://gist.github.com/eb02e9546102594e8bf7
Also be sure to check this guy's blog out: http://blog.sanctum.geek.nz/

Tons of other useful articles about terminal and vim and things like that...
Some Last.fm passwords leaked [Image]
Cheap beats by dre, monster headphone
high performance monster headphones,including Lady Gaga and Diddyebeats on sale together Beats Studio dr dre Tours and the Solo power beats
PSYC - the fastest yet extensible chat-protocol
No, this stuff is too important to be handled hastily.
Obat Herbal Penyakit Darah Tinggi
Sepertinya telinga kita sudah tidak asing untuk mendengar penyakit darah tinggi. Penyakit ini sangat erat sekali dengan masyarakat. Begitupun dengan pengobatannya, sangat banyak pengobatan untuk darah tinggi. Tetapi yang satu ini beda, kami mempersembahkan sebuah produk kesehatan yang begitu dahysat akan khasiatnya yaitu jus manggis xamthone plus terbuat dari ekstrak kulit manggis pilihan yang dapat dijadikan sebagai obat herbal penyakit darah tinggiuntuk anda yang menderita penyakit darah tinggi.
Sierra On-line founder Ken Williams on Adventure gaming in the 80s
Exam Sheets
Exam Sheets Cram provides brain dumps and test questions for all actual tests with pass for sure guarantee. You success is 100% guaranteed after using our exam dumps.
The Most Popular Passwords Stolen From LinkedIn
Also the plugin "Buffer Explorer" http://www.vim.org/scripts/script.php?script_id=42
which lets you switch between all buffers easily.
Without it vim is not complete.
Visual Studio has an extension engine, you can download many extensions for free. Go to Tools > Extension Manager and browse away. There's one called Productivity Power Tools that we just install by default.

Also, XCode has a nice feature where you can switch between .h and .c files with CMD+Up. This is missing from VS, but you can add a macro and map it to a key, for me it's ALT+O. See here:

http://www.codeproject.com/Articles/2223/Switch-between-Head...
How could you test exploits, when the underlying os core is linux, not darwin, and all higher level libraries are completely different implementations as well?
Medical Billing Services Using Advanced Technology
Unique salts are absolutely the correct way to rainbow-proof a database of hashes[1]. But a novel hash function will still do the trick and isn't comparable to using a single salt across the entire database, as you originally claimed.

Reverse engineering a novel hash function, while theoretically possible, isn't a capability possessed by the folks dumping passwords from LinkedIn or Riot. And even if it were, doing so would cost more than would be gained by compromising those passwords[2].

Thus, in practical terms, a novel hash function is a great way to undermine attackers, not unlike using Linux or opening files in non-standard viewers (LibreOffice, Nitro PDF Reader, etc.).

1. And if you have access to a good cryptographer, you should absolutely roll a novel hash function as well. Security through obscurity is the proverbial cherry on top of your defensive sundae, i.e. it's only a bad thing if you rely on it exclusively.

2. Not to mention that the whole point of rainbow tables is that they've already been computed. If an attacker has to reverse engineer a hash function to create a rainbow table, that largely defeats the rainbow table's purpose.
Apple’s iOS 6 confirmed by a banner
Its so freaking awesome for Ken and Roberta Williams to take such a personal interest in the Two Guys Kickstarter. It makes me wish SIERRA didn't get destroyed and sold off for spare parts.

Still, as long as we get the Two Guys back I'M SOLD!
The analogy still fits. I was suggesting that they don't build apps for iPhones, Apple TVs, Macs, etc. You can't put your chicken in a KFC bucket, even though you worked out the secret recipe. You can't put your app in an iPhone, just because you reverse-engineered a piece of technology.

> By limiting Airfoil to jailbroken phones, Apple kills 90% of Rogue Amoeba's revenue.

Although you're right in saying this, it's only because 100% of Airfoil's revenue comes from the App Store. If they had revenue streams outside of the App Store (by choosing a different platform or devices), Apple wouldn't be able to block a cent of that income.
Cara Mengobati Tekanan Darah Tinggi | GLUX | 085219946055 / 085322379603
Cara Mengobati Tekanan Darah Tinggi

Tekanan darah tinggi Anda sulit untuk diatasi dan disembuhkan ? Cara Mengobati Tekanan Darah Tinggi Jelly Gamat Luxor yang mampu mengobati tekanan darah tinggi Anda secara lebih aman dari efeksamping, serta mampu menormalkan kembali tekanan darah Anda yang tidak hanya bersifat sementara. Inilah kehebatan yang dimiliki oleh Cara Mengobati Tekanan Darah Tinggi Jelly Gamat Luxor yang tidak dimiliki oleh yang lainnya.
Konsultasi lebih jelas dan lengkapnya hubungi kami langsung dinomor : 08521 9946 055 atau 0853 2237 9603 [TLP/SMS]

FORMAT PESANAN yaitu :
ketik GLUX : JUMLAH PESANAN : NAMA : ALAMAT LENGKAP : NO. HP / TLP
kirim : 08521 9946 055 atau 0853 2237 9603
Zivame coupon-Rs200 Discount On Rs1,200
a bloated mess that slows computers to a crawl

This is simply not the case.[0]

[0] http://dottech.org/wp-content/uploads/2010/12/dotTech_AV_Com...
To the majority of users, including me, that idea is actually novel, and the novelty itself demonstrates the hidden corners that are lurking quite well.

I believe that point was well made, even though in a technical sense, the exact error was unfounded.
just change the domain to flickriver: http://www.flickriver.com/photos/nasa_jsc_photo/sets/7215762...

photo size adjustment on the left
>At some point it becomes a burden to see the code behind the comments. (And just so no one misinterprets me: I am not against comments /per se/.)

Then use an editor/IDE that can automatically hide or fold the comments?
Really? They always seemed quite incompetent to me. Upgrades frequently took 3 to 4 times as long as planned. Unscheduled downtimes happened at least once a week. Matchmaking took forever even when servers were busy, and when asked about it on the forums, the developers described their matchmaking algorithm as one that ran in n!! time on the numbers of players looking for a game.
The "duty as favor" part of your comment was very insightful. This is a recurring theme in all actions that ultimately cost the person performing them without foreseeable payback. This is, in my experience, displayed by people with shaky moral fundament and questionable values. There's always speak of how e.g. "white lists", the inclusion in which is awarded to persons or companies that act correctly, is detrimental - because they should not be handling incorrectly in the first place, and being normal should not be incentivized.

However, when you're running a business, especially during its infancy, your values need to be questionable and questioned in order for your approach to adapt to the environment. Following questionable values in this case is not only admissible but even required, and you'll need to reinvent yourself quite often. There is no "normal" when you're trying to break the mould.

Definite upvote from me for bringing this up.
Not an expert, but I believe rehashing the hashes is a good way to decrease entropy.
Once more, a reminder that we - the hackers - should stop giving Apple our money. This is not the kind of computing environment we want to encourage.

It's time for someone to re-edit Apple's 1984 commercial and swap the logos.
That's really a fun example. It took me a while to even find the definition of f after having been distracted by all the comment clutter. Point taken.
It's at least unclear. 37s indicated previously that the buyer would need to build a new billing system and my impression was that customers would need to re-enroll in a new billing relationship. 37s has not clarified one way or the other.
Throwing the baby out with the bath water. I'd much rather have good comments.
The bourne shell has been officially standardized since POSIX 25 years ago...

...and the maintainer of the Vim syntax highlighting module for Bourne Shell scripts still refuses to default to POSIX mode, because some OSs still ship with a pre-POSIX /bin/sh. grumble grumble grumble
The short XKCD password is based on a dictionary word, making it vulnerable to intelligent brute force (oxymoron of the day).

I imagine the calculation goes something like this:

1/50000 Likelihood of a particular uncommon word
1/8 Substitute up to three letters for numbers
1/2 Initial capital or initial lowercase
1/32 Add a punctuation character at the end
1/10 Add a digit at the end
1/2 Possibly swap punctuation and digit at the end
----------------------------------------------------------
1/512000000 Resulting probability
-28.93157 log2(1/512000000) -- number of bits of entropy

So, if e.g. XKCD assumed only 25000 uncommon words to choose from, that would give ~28 bits of entropy.
Best Free WordPress Plugins