skysight-inc/HackerNews huggingface dataset:
Well, ok, so 30% thermal efficiency at the power station[1], and 10% loss in the transmission lines[2]? That gives us .3 * .9 * 2.5 = .68, or 68% thermal efficiency. That compares favorably to the manufacturer-claimed 62% efficiency of the gas heater I cited above. I can even imagine a scenario where an architect could design a house so that heat source of the water heater is near the heat sink of the fridge. In that case, the coefficient of performance of both devices would improve.

In case this wasn't obvious before, let me state this very clearly: Over 30% of the energy content of the natural gas used by your water heater goes up the chimney and is not used to heat the water. Gas water heaters and furnaces are NOT 100% efficient.

[1] Wikipedia claims that conventional external combustion (i.e., steam) power plants have a thermal efficiency of 33%.

[2] Wikipedia claims that transmission and distribution losses nationally averaged 6-7% in recent years.
Just get a warrant, raid into their server rooms, and don't forget to tell all about it to us!

Now seriously, the government got too big. What are you going to do about it?

Caution! Everything you say here or anywhere is being recorded, and may or may not be used against you in a court of law.
I use FastHosts, had no issues and DNS records get updated pretty quickly whenever I make changes.
> 'faster Python'

Why throw away Python's capabilities to execute it faster? Just make use of PyPy.
I'd be interested in a similar program for Design – is there such a thing?
Or to sum it all up: "Nothing is perfect."

Gee...
Can someone please explain why GPUs are so much better at brute force than CPUs?

Do they have better instructions/pipelines for the math needed? Why are these not useful/implemented in general CPUs?
Forking the project would take more time than starting from scratch; wish is something that needs to be done anyway.

And this is a healthy reminder that when you mess with someone else platform without an actual API you have to test a lot... because you don't understand anything about the implementation; not to mention it could change anytime (especially something as experimental as HTML5 video tag).
Did you just squeal?
Only way to have a truly private conversation is in person...maybe on a boat...a little bit off shore...with the motor idling :)
I'm interested in how they managed to cleanly remove the entire meat of the blog post without damaging any other aspect of the site. Is JavaScript really that ... petty ... or did they have to work hard to achieve that effect?

Judging by what w3m and lynx show me, they're doing User-Agent sniffing to serve up pages. Isn't that a violation of the Geneva Convention at this point?
"“Wait, aren’t you guys all about SMS app integration? Why are you talking about protocol standards, I’m confused!?” - Don’t be. Education is never a bad thing. We at Parseco are simply happy you’re visiting our blog because you feel can learn something new. Why limit ourselves when sharing knowledge?"

Too introspective.

"Got that? No? Not sure? Ok, think of those two as two different operating systems that work on the same CPU, like Windows and Ubuntu on, say, Intel® Core™ i7. There we go.

In the end, mobile telecommunications industry standards might change, but the Parseco blog has got you covered. Check back next week to see what else we’ve got."

Ugh.
Robots Updating Website (Tesla Motors)
Neat way to demonstrate their superior robotics in this website is down screen:

http://www.teslamotors.com/assets/site-down-page-animation.gif
> If you taper the tower with an exponential curve, 1/e^x, the pressure on the bottom of the tower can be constant as you increase the both the footprint and the height.

So why can't we build a space elevator?
Read the article - they specifically talk about drawing your own pointer. You don't need to control the pointer, you just need to make it appear to be somewhere else.

Remember all the shitty spam adverts themed to look like Windows XP dialog boxes? I can't wait to see what the bottom-feeders can come up with given this sort of feature.

At least it sounds like Chromium uses a modal yes/no question bar.
GSM is still what I buy a phone for. The ready availability of Wifi without monthly fees makes LTE less significant for me as time goes on.
Custom Chips Could Be the Shovels in a Bitcoin Gold Rush
This seems only for Chrome. Any recommendations for Firefox?
I'm a long time lurker of HN who just created an account to correct something you are wrong about.

> I waste time trying to correct people who will never in a million years be swayed by a random internet comment.

The ability of strangers to broadcast opinion at each other is one of the largest changes in communications history. Society is structured by how we communicate with each other. Without writing we wouldn't have had command economies, without a printing press, we wouldn't have democracy* and without money we wouldn't have a free-market. How we communicate with each other literally builds our society. In a thousand years they will look back at this time as one of the fundamental turning points in human history.

Perhaps your one comment doesn't make a difference. But when it is voted up and it is repeated by others, it does. It creates a social feedback mechanism for creating morals and ideas and ultimately laws. It changes who we are as a society.

Being able to correct some random strangers wrongness on the internet is one of the most important fundamental inventions in the whole of human history.

Having said that, I totally agree with the article posted. It is not a process that engenders inner peace.

* Ancient Athens used theater to the same effect.
I'm sorry, but the "entire family of SHA hashes" is incorrect as SHA3 isn't present.
> The National Institute of Standards and Technology (NIST) has issued a statement that says SSL certificates with a key length of 1,024 bits or fewer will be insufficient for security after December 31, 2010

> It is recommended that the algorithms and key sizes in the "Through 2030" row (e.g., 2048-bit RSA) should be used to provide the cryptographic protection

http://csrc.nist.gov/publications/nistpubs/800-57/sp800-57-P...

1024 bit is impossible to bruteforce. Simply incrementing an integer 2^1024 times will take more energy than our whole universe has.

Heck, even 128 bit would take 3.1×10^19 years to bruteforce with that GPU setup. My citibank.com uses a 256-bit connection.

SSL is not "less secure" than my 30-character password (correction: 128-bit one is a bit less secure, but 256-bit one is much more secure).

If it were, all the banks would be freaking out and would shut down their web interfaces.
Actually I am such an owner. I'm interested to see if the AWS SDK could be used as foundation, even though my own implementation is just a thin wrapper plus an S3 client, most of the time doing the low level plumbing (such as request signing).
> I don't think this is misinformation. You would be surprised at the number of IT people who have no clue how fast NTLM hashes can be brute-forced. Spreading this knowledge is good.

That's just depressing, considering how long this has been a problem.

Advice has been, for many years, to avoid using passwords 14 chars or less to force use of NTLMv2.

Here's a Microsoft document from 2004: (http://www.windowsecurity.com/articles/Protect-Weak-Authenti...)

> You would be surprised at the number of IT people who have no clue [...]

No, you're right. It's widespread lack of knowledge, and letting people know that some stuff is not secure, and other stuff is more secure if you have a complex passphrase, is important.
this was a quick hack
Uh, article? How about a direct link to the interview with known NSA whistlerblower? http://www.youtube.com/watch?v=TuET0kpHoyM
To avoid the NYT paywall, just append "?_r=1" to the URL (perhaps removing other "?..." stuff).

[It seems too simple to last, but has worked great for quite a while...]
Because they cannot. they only serve 1000 results,

http://statspotting.com/2012/12/an-interesting-fact-about-go...
NAND then something new came along: Nanotube men get $10m
The Pirate Bay does not have to worry about the DMCA, they were originally (are?) hosted in Sweden, and US law like the DMCA doesn't apply there.
Job basket forums
New forums built using NoSQL technologies offering free advice, suggestions and tips to job seekers from industry professionals
I only find what I'm looking for on the first page about 1/3 of the time myself. Even after some refining of terms.
While it obviously makes no sense to use client-side crypto for verification, there can still be use for things like MD5 and SHA-1 on the client side. I have a script that does SHA-1 hashing for images fetched via XHR, for example (which is used for reverse image searching purposes).

Seeing this, I guess I should do some benchmarking and see whether it gives better speeds than my current implementation (and also look for any other options and test those too).
One correction: assuming the disk access was for files scattered around on the drive, requiring a seek each, you're looking at 10ms per file. At 1,000 files (wild guess) that's 10 seconds.
I Know Where You Tweeted Last Summer
Thanks, hope you find it useful :)
I started using it last week to calculate a fingerprint of a set of files (http://cburgmer.github.com/csscritic/)
That would still allow for plenty of scrolling, even if less than infinite.

Plus, setting the cut-off at 1000 seems more of a "will not" than "can not".
Isn't it well past time browsers got a standard crypto library that couldn't be overridden? Are there any vulnerabilities in that scheme?
Roughly speaking, CPUs are highly optimized for sequential execution, with long pipelines, high power consumption, and complex implementations of arithmetic/logic instructions (I'm not an expert, but I _believe_ these are much _better_ than on GPUs, except possibly for certain graphics-related GPU primitives), but relatively few threads. GPUs are optimized for parallel execution, and run many more threads than CPUs, each with higher latency, but nonetheless with higher overall throughput.
Wow, you are the first such example I've heard of. Please email me adg@golang.org. I would be very keen to hear about your experience with the community.
As someone that does research full time in an academic setting, I am happy to hear someone talking about (and refuting) what I can imagine some companies calling a "research" position. I agree with him on his points, and I hope this drives home a point to some people who may be in a similar situation.

And, for the record, Richard Feynman did not do very much paper reading. I know, I know, a very special case, but I had to say it...
The PLT Games - monthly programming language competition
Since reading that xkcd, I use phrases as passwords, using a simple Ruby script to generate them:

w = File.readlines('/usr/share/dict/words').map { |w| w.chomp }.reject { |w| w !~ /^[A-Za-z]+$/ }; 3.times { print w[rand * w.size] }; puts

I generally get an easy to remember password after about 3 tries. The biggest issue I have with this is typing in passwords on mobile devices.
An aside, I believe the early computer witnessed by Lawrence Waterhouse in Cryptonomicon used this mercury column system, it was described as visibly moving up and down inside the columns.

I hadn't heard of anything like it at the time, it was an intriguing idea - I wasn't even sure Stephenson hadn't made the whole thing up.
Perhaps their usability testing shows most users don't like scrolling (or that those that do prefer image searches?)
What is beautiful about the Gmail app? All the grey? I'm all for clean design but I don't exactly see how it's cleaner or nicer than Mail.app.
Strange thing when you talk about russia and other potentially censoring regimes you'll also need to talk about SOPA, PIPA, ACTA and what ever else the western governments try to pull off..

It's not like "we" are exactly a role model, either..
Would it be possible to change this in OS X without making the whole user-land incompatible?
What if I create a new hotmail account which I use exclusively for emailing a random address in Pakistan, and after a few months delete all of my Facebook/gmail accounts and go completely off the grid save for this one email account which I start accessing from internet cafes dotted around the country, where I also look up information on Arabic websites about fertiliser... would that get their attention?
Affordable V-neckline satin wedding dress
Agree. It would still be great to scroll through 1000.
Foreign Language Learning Hacks
As a matter of fact, I sold 16 GPUs to Jeremi, the security research in question, and yes it was just a fraction of my Bitcoin mining farm. Your statement is true :-)

(Hi Jeremi, nice work!)
How long ago did you try this?
Places to Promote Your Blog
>> swipe-to-archive simply isn't there

>> Swiping the other direction exposes five options, two of which (I assume "archive" and "delete") have rather ambiguous icons

Hyperbole, much?
well, i think you can look up the pricing for gateway nodes for cellular wireless equipment vendors (hspa/umts/lte/cdma etc.). my guess is that it should somewhere around 200-400k range. a sufficiently capable box can handle approx. 7 - 10m subscribers simultaneously doing data.

any cellular network that you send data on, already does this. standardization only levels the playing field.
EBay View About Me for cloudcomputinginfo | The Customize Windows
This is official buying and selling Ebay shop profile of TheCustomizeWindows. The Customize Windows is an independent Technology web site and has not been authorized or otherwise approved by any company but is a branch of own company.
I love the Gmail iPhone app.

In particular, I love that it lets me change the "from" address, similarly to how the gmail.com site lets me do that.

Neither Mail.app nor Sparrow made it easy to change the from.

I have a few different email addresses that all get forwarded to my gmail account. Finally my mobile mail problem -- being able to select my from -- is solved.

If anyone from Google is reading this, thank you!
"Your browser is not supported.
The latest version of Safari, Chrome, Firefox or Internet Explorer is required ..."

They have no good reason behind whitelisting browsers.
That seems highly unlikely, and to my knowledge, they haven't even A/B tested any kind of endless scrolling on the web search.
Looks like a copy rather than a pivot.
Yes, there might be other attacks on the password, but rorr is responding directly to part of the article which claims

> Gosney’s system elevates password cracking to the next level, and effectively renders even the strongest passwords* protected with weaker encryption algorithms, like Microsoft’s LM and NTLM, obsolete.
That would provide 100 pages worth of scrolling. And scrolling through 1000 items would be a huge improvement from their current 10 results per page.
>Soon app innovation will stifle because only a very few companies are making money. Indie/mid size developers will stop working on innovative apps and start working for bigger risk aversing boring companies.

I doubt it. The real problem with the app store is 99% of what's there is either crap nobody could want or a me-too version of one of the big sellers. People developing that kind of stuff don't deserve sales, and if they drop out of the business, well, no harm done.
The greatest success in complicating this issue, has been the easy and constant association of crime in particular child porn, with encryption.

The messaging/stimulus/response isn't fully ingrained into people yet, but there is a strong need of an equally useful counter narrative.
LinkedIn used unsalted SHA-1, had their passwords leaked, and within a month 90-95% of leaked passwords were cracked[1].

Admittedly LinkedIn isn't a critical application calling for people's most secure passwords - but it's evident that only 5-10% of users use passwords that take more than 1 month to crack when hashed with SHA-1.

[1] http://securitynirvana.blogspot.co.uk/2012/06/final-word-on-...
Aren't phrases easier to type on mobile devices than letter / number combinations? I always find it annoying to have to switch to different keyboard modes (text / numbers), or having to hold the letter / number key for a few seconds.
> Is what you're saying is that those compilations are fast enough? You wouldn't want it to take 1 or 3 seconds and see no reason why it should?

In most practical cases (incremental rebuild) it does take 1-3 seconds. There is just not a huge amount of practical benefit to me. If one has interest in things taking 1-3 seconds for a full rebuild provided one has compiled the code before, there's ccache:

I had to install ccache (reason: this doesn't even cramp my workflow enough to bother until doing this benchmarking) and just do this:

env PATH=/usr/lib/ccache:$PATH time make -sj10
All of PostgreSQL successfully made. Ready to install.
6.05user 1.88system 0:02.48elapsed 319%CPU

If I don't cheat by using ccache, then turning off the optimizer gives me about 50% of my time back:

120.00user 11.72system 0:21.75elapsed 605%CPU

Here's the result of touching one c file in the executor and doing an incremental build (including linking):

0.74user 0.18system 0:00.68elapsed 137%CPU

A randomly chosen header file gives me about two seconds, with --enable-depend on:

3.33user 0.51system 0:01.53elapsed 249%CPU

I like Go, and appreciate that it compiles very quickly in some absolute sense, and for many other reasons, and do not wish for a hideous preprocessor system, but to me claims against the time it takes to compile a reasonably large C program are dubious enough that is can only lead to overzealous suspicion by parties that have to make a quick evaluation on what to spend their time with.

> they take 10-60 seconds for a 1 line change in a .cc file....

.cc is another kettle. Just as the disadvantages of .cc should not be lumped with .c, the opposite also has to be taken into careful consideration: some advantages of .cc are not available to .c, and some advantages of both are retained in .go.

Also, ./configure and Postgres's 'initdb'. Now that's slow, in spite of some efforts to speed up the latter.
Work Decibels - How Projects Should Be Estimated
By giving exclusive rights for premium services, Disney and other studios have full control over the content. The worst that could happen is that the content would become commodity like news content on the web.

The more exclusive they make the content appear, more likely people will continue to pay for it (again and again).
Such passwords are certainly secure, but it's a pain to have to carry Keepass/other programs around when using other computers. I think I've found a happy medium by memorizing a simple password-generation function in my scripting language of choice. It produces sufficiently strong passwords, and if you're stranded without Keepass you can still generate them using a local interpreter or a site like codepad.org.
In Mail.app on iOS you just have to tap the 'From' address and choose a different one. What am I missing?
Literate programming tools are mostly obsolete
What is funny is you can create a your own search engine running Google's API and you can dictate unlimited results of the 1st page (Bing offers the same option for their search API).

I created such a search engine myself, but instead of displaying the standard text results I displayed only the website favicons so as you scrolled down infinite favicons appear, click a favicon it takes you to the webpage.

I think nickporter hit the nail on the head about the first page of results being so important and as you mentioned the competition to be on Google's 1st page is good for Google financially. However, one complaint about my search engine was that since the results often repeated the same favicon users thought the results were subpar, never realizing the results were Google results all along. By limiting the results per page it is harder for people to see how often Google's search results repeat, which according to my feedback users associate with low quality results.
This is getting silly so this is my last answer:

1) It doesn't work in Youtube.com itself and it doesn't have anything to do with copyright but with the uploaders preferences (but yes, song owners sometimes enforce this setting on behalf of other users).

2) Many music videos are disabled; so call this a patch is technically inaccurate because it probably disables more videos than it enables wish is something that makes "gets the job done" a debatable statement.

3) To point out a bug doesn't mean I am willing or able to fix it; that is not how open-source works anyway.
Also:

> The latest version of Safari, Chrome, Firefox or Internet Explorer is required

I see two browsers on a fairly fast release schedule. Do they really update their User-Agent filter on Firefox's release cycle? On Chrome's release cycle? At that point, they might as well be specifying patch levels; pick a minimum version and keep with it.

Or, you know, design a site up to modern standards, because if you absolutely need everything in the HTML5 spec to host a blog you might as well actually listen to a web dev once in a while.
Paper reading is one of the ways of learning what else is out there. You can substitute that with talking to other people. Which Feynman did a lot, judging from the stories in his books.

Actually, now that I'm thinking about it, it seems to actually be MUCH more efficient (if you have smart people to talk to): trying to find the good papers in the middle of the sea of publications/noise is a very time consuming task.
The same video works very well on Safari with ClickToPlugin
What is the Google query returning more results?  
What is the google query that returns more results than any other possible query ? Is there a limit in the number of returned results? If so, what is the query that reach this limit ?
I think the suggestion of SSL being less secure was based on it possibly having some vulnerability or other (which, historically, has happened), not necessarily having to brute force it.

Hashes don't tend to have side-channel attacks.
The repetition obviously applies for your search engine that displays solely favicons, but I don't think that there are many duplicate search results.
Interesting, since it was a regional vote, that means Australia and ROK, two of our allies on ITU, were outvoted within their regions. Wonder what region Australia is classified as?

Implies that South America (somewhat expected) and Africa (expected) voted to support the ITU against the US.
Ask HN: What it takes to operate a service like WhatsApp
I would like to know what is a real cost of running a service like Whatsapp. It looks like a simple socket connection stuff. Does Whatsapp stores and forwards the messages or is it peer to peer.

I would like to know the disruption point of services like WhatsApp
Still so pretty...

/me runs
ClickToPlugin works like a charm on Safari (and it removes all video ads as a side effect).

I'm not in any way affiliated with the developer of ClickToPlugin, I've just been using it to the effect described by OP for some time and it's the only thing that's been keeping me on Safari for a while.
Cleartrip fires PR agency after “three strikes” of spamming
I can't speak for Android, but I don't think the top 25 lists are too prominent on iOS. The Top Grossing List shows very few apps from Top Paid and Top Free, so the three top lists don't seem to promote each other a lot.

I usually shop on Apple's curated landing page precisely because it is full of indie(-ish) content. Not sure what Apple could do better there, short of killing the Top lists altogether.
No thanks, Andrew. I've already contributed enough and I really don't think I owe your company anything at all.
Cute. Following Bitcoin hash generation process, this looks like a toy. FPGA and ASIC hashing would be news on par with contemporary hash generation on smaller scale. This is just a better room heater. (i.e. hashing/W ratio is bad).
Web And Mobile Revenue Models – Fred Wilson