skysight-inc/HackerNews huggingface dataset:
Bcrypt was not designed to counter rainbow tables. Although the internal salt does provide that defense. Bcrypt was designed to protect against raw brute force:

See: http://static.usenix.org/events/usenix99/provos/provos_html/...

> "At the time of deployment in 1976, crypt could hash fewer than 4 passwords per second. Since the only known way of inverting crypt is to guess preimages, the algorithm made passwords very difficult to recover from their hashes--so much so, in fact, that the designers of UNIX felt comfortable leaving the password file readable by all users. Today, over 20 years later, a fast workstation with heavily optimized software can perform over 200,000 crypt operations per second. Attackers can now expediently discover plaintext passwords by hashing entire dictionaries of common passwords and comparing the results to entries in a password file."

> "While salted passwords defeat lookup tables, given a particular salt and hash, an adversary can still mount a brute force attack by evaluating F(s,t) on every possible password. It follows that the best security one can achieve is $\epsilon\approx 1/\vert F\vert$, where |F| is the cost in gates of implementing F. Usability requirements therefore effect a lower limit on $\epsilon$--if people can only tolerate a one second delay for checking passwords, F can take at most one second to evaluate. F should not take significantly less, however, as this would unnecessarily weaken security."

> "The number of gates |A| that an adversary can reasonably muster for an attack increases constantly as hardware improves. Fortunately, so does the speed of machines that must legitimately evaluate F. That means passwords should not be hashed by a single function F with fixed computational cost, but rather by one of a family of functions with arbitrarily high cost. Instead of repeatedly throwing out functions like crypt and MD5 crypt to start over with more expensive but incompatible ones, systems should allow the cost of any password manipulation software to scale gracefully with a tunable parameter. Thus, $\epsilon$ can decrease as fast as hardware improves and users will tolerate. Compromised password databases will then enjoy maximum security against off-line attacks."

The purpose of bcrypt was to allow for a single algorithm that can be tuned for existing speed of existing computers to produce a "slow" algorithm. Then, as Moore's law makes computers faster, bcrypt can be progressively slowed to keep pace, so that performing a brute force still takes an unreasonable amount of time.
I agree that the post is mistitled and should be called Why you need side projects. The two quotes at the end of the piece support this:

“If you observe a really happy man you will find him building a boat, writing a symphony, educating his son, or looking for dinosaur eggs in the Gobi Desert.” - Australian psychiatrist W. Béran Wolfe

“Find a happy person, and you will find a project.” - Sonja Lyubomirsky
Nice work! A friend of mine just noticed that the Glen Park farmers market is missing: 580 Bosworth St
(between Arlington St & Diamond St)
San Francisco, CA 94131
Neighborhood: Glen Park
(415) 647-9423
http://www.pcfma.com/
At best you could gain a 24.5ms advantage (through the earth to other side @ 12,800km versus around it at pi*6,400km).Actually quite significant in HFT terms.

But: sady this is completely impossible. The weak force is not called the weak force for no reason. Neutrinos hardly interact with matter at all - that's why they can stream through 12,800 km of solid iron almost unimpeded. You would need a detector the size of the solar system in order to collect any meaningful data volume in real-time.
Censoring relevant information is, of course, never good but the authors contention was that the information isn't actually relevant. Its always good that people who are wrong get a cogent reply, but beyond that adding a "me too" post doesn't have any more benefit than a downvote does. I used to just upvote post I agreed with, but since those are no longer public the only way to clue readers in to what the consensus is is to downvote.
Entrepreneur Spotlight: Russ Wilcox, co-founder of E Ink (Amazon Kindle display)
There are downsides to this sort of duplication (like security bug fixes not being automatically applied to all apps using a certain JRE revision) but in real-world practice, the benefits outweigh the downsides.

Windows' SxS DLL system has the same basic issues but it solves so many distribution, UX and versioning problems that the downsides are totally worth it.
Here:

http://www.amazon.com/Evidence-Based-Technical-Analysis-Scie...

Bottom line (but very controversial among any diverse group of investors): it doesn't work. I always try to steer people away from it if - it's one of those big choices in life (like choosing a good wife or husband) that can have a major impact a few decennia down the line.
The story of Suck.com
So then is there a step where you execute your node (and I guess Jam if you're using that) code in order to generate production client-side code from the node and jam-dependent code? Or is all of this for server-side code where the node and jam libraries would be installed?
One of the devices in my house is an older blu-ray player that has the Netflix streaming ability, but it can only play stuff from your queue! So, I have to put stuff in my queue I if I want to watch it on that tv. Otherwise, though, doesn't seem so useful when you are just streaming.
I have been a Django developer for a few years now. If you are like me and you start a lot of new Django projects, trust me when I say you do not have time NOT to use this. Awesome tool that helps you get up and running with an new Django project quickly. Go, now, quick...start using it.
Ironman And Captain America Fight Over Compliance
I've found this line of argument can really help open people's eyes to the opportunities around them.

Even if you're an employee (or job seeker), you are running a business. Your product is your skills. Your market is all your potential employers.

What are you doing to market your product? What are you doing to improve it? Are you selling to the right market? What would it take to develop a different product or adapt it to a market you'd rather be in?

Everybody who works for a living is in business. Some people just don't realize it, and therefore do it really badly.
Aren't we handing over all the flexibility of open app development so that Apple can protect us from crapware? What the hell are they doing with my $100 a year?
Maybe the price of retail property needs to come down a bit. If you look at what shopkeepers have to pay in rent alone, let alone associated taxes, insurance etc., it's so crazily high it's a wonder any of them can afford to stay in business. Landlords could get away with charging that kind of rent when there was no other game in town, which is presumably why they're in the habit of it, but I think at this stage it needs to come down to something the retailer has a better chance of being able to afford to pay.
Congrats to your team for winning! Building a project in 54 hours is awesome... Django Project Builder took a bit longer :-D
"it is Netflix's data as they are the people who spent the money to collect it."

can easily be turned around to say

"it is the customer's data as they are the people who spent the money to produce it."

Legally, sure... all of you guys are spot on. But this article speaks to what people want, not what they legally deserve
The World's Top Supercomputers: An Illustrated Guide
Of course, I've seen many a financial aid check go to Apple

http://store.apple.com/us/browse/campaigns/back_to_school?ai...
Well, not exactly. From wikipedia: "Node.js consists of Google's V8 JavaScript engine, libUV, and several built-in libraries." So node installs a version of the V8 engine in your dev environment, so it can run js on the server without a browser.

That's why jam requires node - it's written on javascript and uses node packages so it can work with the filesystem, and do other server/dev environment things that js in a browser can't do.

When you develop with node, it's just like doing development for any other language.

Edit: in case this wasn't clear - you aren't working in a node environment. In this case, node is simply used because it can execute javascript in a server environment. So jam can be written in js and do filesystem stuff if it runs using the node utility. Jam simply runs on node, but a project using jam doesn't necessarily need to be a node application.
The article is aimed at the wrong people. Corporate culture starts at the top. Stop judging your employees by the hours they appear, and judge them on results. If you can't measure results, you were in trouble already.
I think you missed the https://secure.stairwayapp.com/tour
There are some screenshots. Does this help?
They were still doing in-house engineering, but in Jobs' biography it's repeatedly mentioned that Sculley changed the focus from product quality to profit and that caused the downturn in their business.

Obviously, not a completely objective source, but it's not necessarily true that they were doing exactly the same things in 1998.
Facebook has already been using facial recognition for some time. If anything it will just increase the success rate of their current approach.
> I'm willing to bet a fair number didn't read it.

Why would I? I'd personally have assumed that no Apple reviewer would ever permit a developer named "Super Racing Real Games" to use the Microsoft Word logo and name for an app. They're supposed to be there to protect against this sort of stuff, so I can't blame folks for not reading too closely.
Electric rebirth of the VW microbus is powered by an ipad
"One of the biggest problems Java faces for real adoption amongst tech people is still the perception (and I am not sure it is entirely flawed either) that it is insecure."

That hasn't been my experience at all. Java's failure to catch on in the browser is essentially 100% due to performance issues. The dreaded "See a gray box, have your system freeze up for 3 minutes while applet loads". I don't think there is a widely held perception that Java-in-the-browser is inherently insecure, especially when compared to Flash.
facebook really seems to be intent on becoming the world's largest photo-sharing site.

the question is: are they planning to transform that from "omg check out these crazy party pics" into "everything is photographed and we've identified everyone involved" variety?

it seems to me that the implications of this line of progress are incomprehensibly far-reaching...
Entrepreneurship is the safest career
I agree. Most of the people who works that kind of hours already know and agree with the article. This article should've been directed at the managers who require that kind of hours from the employes.
Most people don't know how much disk space an email takes, it didn't stop Gmail from just giving 2gb free disk space.
it's not 10,000 a millisecond. Trading desks normally think in terms of daily PnL - he prob meant every 1ms latency reduction would make them an extra 10k a day.
Samsung CEO Calls for Software Improvements
> Bcrypt was designed to protect against raw brute force

Which is precisely what calculating a rainbow table involves.
The fundamental problem is that a camera is a privacy removing tool. If someone takes your photo, now they are in charge of your privacy.
They've always had this. Previously it's been called "Ctrl+Alt+Del Unlock". It then takes you to the password prompt. This is just replacing that key combination with a prettier screen, and also adding a quick glance at how many emails you've received, how many IM chats, weather forecast, etc without having to log in.

Without getting into the discussion on how incredibly important a password on a laptop is, you can disable this lock screen just like you would disable the password prompt after coming back from sleep mode on any previous version of Windows.

Again, you don't have to slide to unlock. You can just press a keyboard key. And it's always been there.
Yes, but as lalmalang said, these are not very useful and not discoverable at all.

I don't want to click through 5+ random scenarios to perhaps find one that comes close to what I have in mind.

Well, at the risk of repeating myself. You seem to be generating revenue already, so I would seriously look into hiring a designer for this (or make a contest or such).

My gut feeling is that you're so deep into all this (which is generally good!) that you have a hard time reviewing it through the eyes of a first-time visitor.
Because Everyone (Still) Needs a Router
That's why I'm a composer! I love playing with notes and finding new combinations and seeing how people react to them, preferably in a deeply emotional way.
Apple co-founder Steve Wozniak rips into own company, poo-poos Siri
This is a great set of tips. I'll add a few...

1. If you're just getting started, look out for opportunities to give a lightning talk. These are ideal for beginners - they are only 5 minutes long, which forces you to get straight to the point. It also doesn't matter if you suck, because it will be over quickly - and the audience is likely to be very supportive.

2. Always, always make sure you've been through your talk SPEAKING OUT LOUD at least once (and preferably way more than once) - I prefer to do this in the privacy of a hotel room or similar. Until you've gone through the talk speaking to an empty room it's very hard to know if it's going to work or not.

3. Have backups of your slides. I tend to have a Keynote file on my laptop, and a copy of it (and a PDF export of it) on both a USB key and my Dropbox account just in case.

4. If you're going to attempt live demos, have a backup plan - static screenshots, or maybe a screencast-style video.

5. Remember: the audience are on your side. They want you to give a great talk, and they'll ignore any ums and aahs. If you forget what you were going to say next, just pause, breathe and figure it out - what feels like 30 seconds of silence on stage will probably only be 5 seconds of real time, and your audience are unlikely to even notice.

There are some good tips about controlling stress during speaking (including an answer by me) on this Quora thread: http://www.quora.com/Public-Speaking/Any-advice-on-how-I-can...
Now that you mention that, that's a good reason. Would it be possible for facebook to use this to build a database of photos of people's faces or facial features? I really don't like the sounds of that.
I apologize -- I really don't use any social media personally outside twitter on occasion.
There are hierarchies in any kind of communal human activity. Art's not special in this sense. You can choose to participate or not. And it's certainly not a single hierarchy. Take your pick, if you feel so inclined.

My reaction upon seeing something like the lawn chair piece would not be to automatically reject, but instead it would be an increase in curiosity. Why is that woman sitting in the chair? Why is it happening in this venue? Why should I care? An artist is usually trying to evoke a response of some kind. WTF is a perfectly good response to get someone's attention. From most artists point of view, the worst possible reaction is indifference.

If I have any criticism about modern art is that the ideas often really aren't that new anymore; the vein has been mined pretty extensively. Doesn't mean the art isn't any good, or that it has nothing to say, just that the term "modern" has simply become another label for particularly type of movement that doesn't connect with its original meaning.

Languages change too ...

Labels, like "art" are human conventions. They are useful in the sense that they can communicate or convince. If you feel good about not calling a work "art", rejoice. But don't be surprised when other people who dig deeper might occasionally find something of note.
Previous discussion http://news.ycombinator.com/item?id=1962051
www.udacity.com

start with their cs1101 course then move up from there.
The Truth About Hard Selling Investors (and What You Can Do About It)
This confirms something I learned from many birthday parties as a child: Indian people cannot sing Happy Birthday, for some reason. Anyone who knows the "chicken dance" meme from Arrested Development, where everyone in the family has a different-yet-wrong impression of a chicken -- that's how it is when many Indians get together to try and sing this song.

Also, I think it's a stretch to refer to hiring a stranger to yell a woman's name as "seduction"
A Classification of Fallacious Arguments and Interpretations, by IJ Good
And perhaps most importantly, while it was an independent company, NeXT was operating under a very restrictive non-compete agreement that forced them to go after only low-volume segments.
Remove QA headache while testing email delivery
> Successful entrepreneurs are lottery winners with attitude, by and large.

Possibly. Actually I don't know. Anyone knowledgeable should disregard my opinion.

> The programming field is no longer young, we should give up that old excuse.

Right. However, I don't feel like we're anywhere near clearing the chaos around the psychology of programming. I still don't know for instance why so many people cannot understand functional programming, which I personally find simpler than procedural programming in most cases I deal with. Or why technical debt doesn't seem to be taken seriously. Programming is several decades old, but it still feels young to me.

> And no you are not being straw-manned, the argument is. Good to not take things personal here.

Hmm, yes, I was too aggressive here. Sorry.

> Studies are necessarily narrow and context-laden, even 'solid and definite' ones.

Ah, I didn't think of this danger. You're right, we at the very least need safeguards. Like, tying downvotes to reasons why they happen, so we (high karma users, moderators?) may be able to nullify those which turn out to be bogus. But that's complicated.

Or, maybe we could just not downvote, but point out in a reply that this is contrarian anecdotal evidence?
Keep telling yourself that. When was the last time you used a Nokia phone? When was the last time you saw a Nokia UI?

The one thing which made the iPhone great was that it finally broke the streak of smart-phones all cloning the horrible, messy and unintuitive Nokia-model which had plagued the industry since the mid 90s.

Take my words for it: Nokia would have fucked up Android just as much as it messed up Symbian. Nothing pretty would have come out of this.
Though honestly, the domain is valuable too. Lots of people probably type in "face" expecting it to autocomplete, and it doesn't always.
Brains are Different on Macs
Because it's wrong. The FAQ itself states that the benefits of registration are prima facie evidence and statutory damages. You can still litigate, you just need to provide alternate evidence and you don't get to claim statutory damages (you have to prove the damages you're claiming).
Ups, thanks for the correction.
The editors of Technometrics were kind enough to post this for us at Edward Tufte's forum a few years ago. Seemed relevant to http://news.ycombinator.com/item?id=4125198 but merits its own submission.
I hate it when people say 'just use the web'. Just because you have a great data connection, doesn't mean everyone does. I have a terrible[1] data connection where I live. I have quite a few apps which I need to work with only intermittent connectivity to fulfil their main purpose: Mail, Theodolite (Photos with telemetry), Outdoors GB(Offline maps), Numbers(Spreadsheets), Sketches, Collins French<->English, Billings (Time charge app), Dropbox (Files favourited for offline access), Fill That Hole... and more I can't be bothered to list. If these required a data connection to launch them they would be useless to me and therefore it would be pointless to own a smartphone. I know there are probably web equivalents with offline storage for one or two of these (although how do you know if a web app is really offline capable?) but its unrealistic at this point in time to say that the web can replace native apps feature for feature for most users especially with the current local database size limits for web apps.

The whole assumption of a constant connection thing really gets on my nerves and there are plenty of native apps which are hobbled by it. There's nothing more frustrating than launching a native app which logically should be self contained only to have it sit there with the UI blocking for ages while it tries to access something on a crap data connection. For example, I truly hate the CalMac ferry app because it should just cache the timetable data in a CoreData (or a web app with offline database would work well too), its probably <100k of timetable data and it yet it tries to redownload a PDF for my ferry seemingly every time I try to access it......Grrrrrrr (timetable stashed in dropbox instead).

[1]About 1-3 bars of 2G signal. No 3G signal within 100 miles in every direction from where I'm sitting.
Could it be that the license to process the volume facebook has in mind is near or higher than the price of the company? I don't know the price model for the face API but it's not unreasonable to consider a tipping point.
This looks like a fantastic tool to use for introduction to front end development. The inline tool tips / tag definitions are very useful if you aren't sure what a particular tag does.
It seems to me more like a jsbin.com/jsfiddle.com clone than a real Web IDE.

The editor is helpful though, specially for novices. The syntax highlight is very different from what you're used to. Although I find it a little too much intrusive it makes it very easy to spot small typos.
Pad Printing Machine Manufacturer|Screen Printing Machine Manufacturer
We are manufacturer of Screen Printing, Pad Printing machine, Screen Printing machine For Flat Surfaces, Semi-Automatic Screen Printing machine For Round Surfaces, UV Coating machine, UV Curing machine, Screen Printing Job work, Pad Printing Job Work, Screen Printing Inks, Pad Printing Inks and accessories.
Commoditization and Leverage
File compression utilities really do go way overboard on what they want to open as zipped files. Installing one usually means having to uncheck maybe half the defaults because they're more commonly used as regular file formats.
Probably, but they've just managed to switch me from supporting them in that fight to hoping they lose it.

Not that it matters one bit what I think, and they clearly know that.
Barnes & Noble denies involvement with Microsoft’s mystery LA tablet event
IBM's Sequoia is the world's fastest supercomputer
A lot of times, creative processes are best fueled with unfamiliar or alien sources of inspiration. If employees brought in objects they like, how much is their decision influenced by how they already think about computer interfaces? Adding an external group to the mix is healthy in my opinion.
I hope Matthew Inman won't be shy about asking for legal defense donations, because I don't think his fans would be shy about giving them. With any luck, a good lawyer, and a few years clogging up the legal system, this could be an expensive mistake for Carreon.
So when Microsoft wants to submit the "real" 'Microsoft Word 2012' to the app store, how does Apple handle the name conflict?

Can I go and submit an app under the name of every existing company name I can think of, just like domain parking?
It doesn't have to be counterculture anymore, because it (and others) already remade that culture into the one we have today. It makes sense that it's right at home in the new culture that it helped shape.
For those who haven't seen the caption below the painting in shrikant's link:

"The vertical strips in his paintings may relate to certain traditions that present God and man as a single beam of light. The name Adam, which in Old Testament was given to the first man, derives from the Hebrew word adamah (earth), but is also close to adom (red) and dam (blood). The relationship between brown and red in this painting may therefore symbolise man's intimacy with the earth."

I shit you not.