skysight-inc/HackerNews huggingface dataset:
He does seem to imply that Dave's solution works, and if you read the last line:

$hash = hash_it($password, $crypt);

So it is fairly clear that $hash and $crypt would be stored in the DB. $crypt is a reasonable (but not great) salt:

crypt($user.$time.$rand);

$user is obviously known, $time is the time when the password was created - or maximum ~2000 possible values for most systems. The main part of the hash is $rand, which is 31 bits of pseudo-random entropy. So about 40 bits of entropy if I'm not mistaken? That should be enough to make it infeasible to create rainbow tables in advance.

EDIT: I'm wrong on $time - it is "mdYHis", so much more than 2000 possible values and is actually pretty decent in the salt, as it's unlikely an attacker would know which user registered when. Unless you publish the registration date as some forums do...

EDIT2: While user is known for each user, it does add extra required input for a rainbow table - if there are 1000 users and you know all of their usernames, you would still need to generate 1000x more rainbow tables (1 per known username) if you wanted to crack all 1000 passwords. Also slows down brute forcing, as you can't use the result of one 'trial' on all users at once. (Correct?)

The real main issue is the speed of brute forcing MD5/SHA1 - it's probably possible to brute force these passwords very quickly if the database is stolen. Use of bcrypt is therefore obviously preferred to slow it down - but it is also very likely that FPGAs can brute force bcrypt just as fast, so I'm not sure how much I agree with the common mantra of 'sha1 is useless, use bcrypt'. bcrypt does, after all, have a speed impact on your login requests and puts more load on your servers if you are handling thousands of logins per second...

I guess large scale FPGAs are probably only in use by NSA and some syndicates, while far more hackers have access to mass GPUs?
Two interesting notes from the abstract:

"The endotoxin-producing Enterobacter decreased in relative abundance from 35% of the volunteer’s gut bacteria to non-detectable, during which time the volunteer lost 51.4 kg of 174.8 kg initial weight and recovered from hyperglycemia and hypertension after 23 weeks on a diet of whole grains, traditional Chinese medicinal foods and prebiotics."

"The obesity-inducing capacity of this human-derived endotoxin producer in gnotobiotic mice suggests that it may causatively contribute to the development of obesity in its human host."
"Hate group under the guise of religion." Fixed that for you. Sorry, but I've got no patience for religion-bashing on HN.
The idea that it's all about the monetary penalty to get the "right" behavior is not just the wrong incentive, as the research shows, but also reinforcing negative stereotypes of VCs.

It's a bad idea.
Great, another article for fat acceptance idiots to read the title of and declare it cake day.

> The volunteer lost 30.1 kg after 9 weeks, and 51.4 kg after 23 weeks, on a diet composed of whole grains, traditional Chinese medicinal foods and prebiotics (WTP diet, Supplementary Information; Supplementary Figure 1), with continued amelioration of hyperinsulinemia, hyperglycemia and hypertension until most metabolic parameters improved to normal ranges (Table 1). After 9 weeks on the WTP diet, this Enterobacter population in the volunteer's gut reduced to 1.8%, and became undetectable by the end of the 23-week trial, as shown in the clone library analysis (Table 1; Supplementary Figures 2 and 3).
I'm afraid to say this, but you sound exactly like someone with very little experience when it comes to large scale enterprise systems (your "serverlets" sums it up).

Java EE is extremely powerful if you can wield its power, and obviously a good understanding of object oriented programming and design patterns is critical in order to make systems that are rock stable, safe (container managed transactions comes to mind) and scalability.

I think you'll see my point once you start working on larger problems. It's not random that many really big enterprise projects (such as banking software) are based around Java EE, and not Ruby on Rails.

Note that I am not trying to be overly negative - it's just that I see this kind of argument all the time, usually from people with no real enterprise experience.
Build HTML5 using Best Practices from Atari Arcade
Mobile Customer Sales Funnel – Apps vs MMS
Quick Tip: Autocomplete Git Commands and Branch Names in Bash
I take it you don't care about a quasi-reasonable budget, the kind without a deficit of ~1/3. Or about the economic growth lost when tax dollars siphon it out of the broader economy. (Or even away from alternative quasi-productive government infrastructure projects.)

Unsurprising, really; there are entire political parties based on the premise of not caring about those things, and in many countries. ;)
This is true of almost every entity.
FB apparently now deploying inline replies
It was being tested about a month ago: http://www.siliconrepublic.com/new-media/item/30193-facebook-testing-new-commen it's now appearing today for other users.
The supplementary information link at the bottom has a link to the diet and how it was prepared:

Dietary intervention and sampling. This volunteer was given a diet composed of whole
grains, traditional Chinese medicine and prebiotics (WTP diet) for intervention. He was
given 4 cans of gruel per day as staple food contract prepared in the form of cooked porridge (370 g wet weight per can) then canned by a food manufacturer (Shanghai
Meilin Meida Food Co., Ltd.) for 23 weeks. Each can contained 100 g dry ingredients (59
g of carbohydrate, 15 g of protein, 5 g of fat, and 6 g of fiber) providing 336 kcal energy
(70 % of carbohydrate, 17 % of protein, 13 % of fat). Fresh fecal samples were collected
with 4 or 5 weeks intervals. Whole blood and serum samples were collected with 0, 9 and
23 week (0d, 9w, 23w). All samples were immediately frozen on collection and stored at
-80 °C for subsequent analysis.
The advantages and disadvantages to feature roll outs
Whats your Startup / App Ideas for 2013?
share your startup / app ideas for 2013.... whats the trends?
I’m one of the co-founders and just wanted to give a bit more info on what we’re trying to do with wavo.me. We’re artists, bloggers, event organizers and fans. We’ve felt for some time that existing services are missing key parts of the music experience. A truly excellent music service should connect artists, bloggers, labels and fans together. It should create a community that encourages discovery and dialogue. Wavo.me is our attempt to create a social network for music.

We’ve started with a service similar to Pinterest -- A simple and beautiful way to discover, collect and share music with friends.

It’s a big project. We’re at the very beginning and we’d love your feedback.

(FYI, you can only sign up with Facebook right now... We know, we know... alternative ways of signing in are coming, along with a mobile version)
The "free-market" reforms being instituted at the time were the shedding of responsibilities of the Chinese state by "privatizing" state-constructed factories via the (often secret) sale of the factories to party members, in other words they went from statism to crony-nepotism. The workers were unaware that these sales were going on and that their state jobs were no longer guaranteed, nor were they part of the public pension system, but effectively serfs to regional power brokers of the party.

Transparency, end of state-party corruption, and the guarantees of political and economic freedom were pretty much what I remember being called for at the time during the news coverage. Tank man was right at the end just before everything went off the air, and has stuck in people's minds because he was just a dude coming back from shopping who decided he'd had enough.
Yeah, panning with the mouse was awful, but with the keyboard it became a real joy, and I started finding the climbers.
The Economist had a debate about the TSA and it was overwhelming opposed to the TSA.

http://www.economist.com/debate/overview/225

I'm not sure if this is bias as simply, for those educated on the matter, the evidence is pretty decisive.
also, John Gall's Systemantics - First Principles - : http://en.wikipedia.org/wiki/Systemantics

'Once a system is set up to solve some problem, the system itself is new entity which engenders new problems relating the development, operations, and maintenance of that system'
If the HN community has any advantages or disadvantages to add I'd love to hear them.
Now why isn't this sort of thing talked about during campaigns?
Hah, that's pretty much what I said: http://weblog.jeroen.ws/blog/2012/11/19/how-relevant-is-c-pl...
Google blocks API access to their own maps demo.
Dave's claims and refusal to change are bad, but that has nothing to do with the code itself. The code is obfuscated sha1-with-lousy-salt. That is nowhere near DailyWTF. It's still relatively secure.
Should brands interact with Google+ communities?
We're trying to get a feel for how best to engage with Google+ communities. Are there any foreseeable drawbacks to having a brand interact with Google+ communities? The alternative is having team members join communities and act at will. Our intent isn't to create a sales funnel but to show ourselves as thought leaders, interested in the design and development community.
It's perfectly logical. The power to search and detain me isn't one I'd like private corporations to have.
"know" is a bit of a strong word here. Does a printer "know" what a W is or does it just know where to put the dots?
Bin your shitty ISP. I just switched to Andrews and Arnold and the main site still works. They have an active no censorship policy.
Yeah, that grabbed my attention too. If they pull it off well ... the possibilities are astounding.
Haha thanks, I agree! There are some existing solutions out there (udemy, coursera, etc) but they seem to cover a different use-case and market (coursecraft being much more informal/hobbyist type stuff). I'm hoping it's just a matter of getting infront of the people who have something to teach (which is often the hardest part :)).
Technical hacker available for consulting
If you are looking for an architect level guy who takes ownership and a doer (hands on), look no further and contact me on 4082039960 or sid4it@gmail.com. I am very passionate about my work.

Experiences quite broad and depth Open source contributor (have github account and projects) Latest client web frameworks - backbone, bootstrap, kickstrap, knockout.js, ext.js etc., NoSQL - Mongodb Mysql, Oracle and list is endless Web crawlers in perl, python or Java or scrapy Python web framework Php (Lithium, code igniter flavors (pyrocms, fuelcms, etc.,) Java or .NET Beanstalk Queue/Tubes, RabbitMQ, MSMQ ....endless

Referential clients and quite visible profile on Linkedin.

I can offer 30-40 hours of my time per week. I am productive. Timings are flexible and rates are negotiable. Willing to consider pilot projects to check creds.

Thanks
You're probably right about those little ant people.

Climbing Mount Everest is more dangerous than attempting suicide!
that's not garbage... it's tents.
Henry Kissinger praises TSA after pat-down
> One could make the counter argument that some terrorists are discouraged by the difficulty and no longer try.

Well, let me know if you actually get around to making the argument. In the meantime, consider the basic economics of an attack as laid out by someone else: If the other passengers on the flight realise that you're up to something, every single one of them has a clear motive to take you on in the fight to the death. Hi-jacking a plane has gotten orders of magnitude more difficult after 9/11.

> For example, how many plane bombings have their been since Lockerbie? None. Does that mean that we should stop inspecting luggage? Probably not.

Good thing, then, that the suggestion on the table is a return to pre-9/11 security, not abolishing it.

EDIT: pre-9/11 security, plus the few things we've realised actually makes sense - such as reinforced, locking cockpit doors.
ASTA Praises TSA for its Risk-Based Screening Initiative
Facebook as the Walmart of the Internet
I think raw talent trumps experience any time, as long as you have a chance to appropriately set expectations and train accordingly.
Mahout is still very nascent and I am not sure how many companies are using it in production. Recommendations impact is something very difficult to measure and hence no benchmarking can be made in this respect. Unlike Overstock, I don't expect many ecommerce companies putting their own development effort into building a solution from Mahout. They'd rather purchase a solution where they can rely on support for a fragile open source project
I got a Fire HD last week. I'm usually forgiving of devices but I haven't been impressed. The form factor is slightly nicer than the iPad Mini but in terms of the user experience/usability it's not a patch on the iPad. The screen is high res but surprisingly 'glary' in comparison (enough so I have to read white on black or the text seems to shimmer).

Pretty stunning, however, is the sound (the best quality I've heard on such a small device) and the picture quality for video. So as a general purpose tablet for a light user, I'd recommend it. But if you have the money, the iPad is better. And if you just want to read, the Kindle Paperwhite is miles better.

The Fire really only wins if you want an all in one that's cheaper than an iPad and you're not fussy about UX, but perhaps I underestimate the value of it being a great video playing device as I don't tend to watch any video other than YouTube (and YouTube is not very good on the Fire HD).
Since not everyone going up the mountain comes back down the mountain and there aren't clean up crews, tents can become garbage.
Your question makes no sense. The writing is so poor that it's unreadable. Is English your second language? If so, rephrase using simpler language and you may get your point across more clearly.
For WinXP do you need to transcode, or can you just serve a lightweight player UI that use H.264 support built into the Flash plugin?
'Habitable' planet discovered circling Tau Ceti star [12 light years away]
Google has competition in Search. I don't think anyone claims they are a monopoly in search. Powerful position, yes. Monopoly, no.

Also, the issue wasn't, "Free", or "Leveraging profits", it was "Tying", which, in certain cases when you are a monopoly, turns out to be problematic when one is trying to maintain the appearance of a competitive marketplace.

The US Government wasn't there to protect the companies, it was there to protect customers. I, for one, am happy that Microsoft wasn't given free reign to do anything it wanted after it had established a monopoly position on the desktop.

Likewise, if Apple is ever able to achieve 90%+ market share on mobile, many of their practices today (such as giving their own developers preferential access to private APIs, or being able to run outside of a sandbox) should be reigned in.
One argument for going web is recruitment: the pool of active developers that know Java, Swing and Spring is shrinking.

Also, the size of the developer community in the Java/Swing world versus that in web technologies is not even comparable when it comes to sharing knowledge and open-source components. (I work for a lab, so many open-source licenses are compatible for us.)

And, sure... it would be so much fun!
Another interesting spider - peacock spider:

http://www.youtube.com/watch?v=9GgAbyYDFeg
A Photo Track Mobile App, essentially a life history Log.
You make that statement as if there is no way you could be wrong - yet there are multiple very large GWT deployments running very happily in production. I've done the exact thing - moving a finance system to a GWT frontend (it also retained a desktop frontend), and the system was reasonably easy to convert. You hook up some html in UiBinder, get some RPC working for the data, login form, refactor the widgets to use the uibinder html, use activities/places to handle navigation and backstack, and off you go.

So "definitely not save time" seems a bit harsh? Maybe worded "if you have anything like my experience, you will definitely not save time"?

EDIT: What part of GWT caused you issues btw? Maybe my uses never hit on the trouble parts.
So, only 1344 cals per day.
The focus here is not on the actual list but on Cody Wilson who appears in it (ranked #14). Should have made it more clear in the title.
What is DNT? Can we differentiate between the idea and the implementation?

As an idea I think DNT is quite strong. Do you agree?

Of course the implementation is incredibly weak, but isn't that a separate issue?
because you can't double click on class names that contain dashes to quickly copy and paste them into your html.

- do look neater but I wont switch because it frustrates me so much to not have that simple feature!
I would be more worried about someone bombing the security line at a major airport than about bombing a plane. I would also worry about the access to glass in an airport -- ask any prisoner if you are wondering why.

"the only alternative is to over-protect to some degree"

You are still assuming that the TSA's airport checkpoint program is protecting us at all, which I would say is a dubious claim at best. Locking the cockpit doors on an airplane is a good measure. Putting an armed guard on certain high-value target flights is a reasonable measure, although I would be a bit concerned about a clever terrorist's ability to identify the guard and take his weapon. Screening luggage for bombs is reasonable, although I think an airport is just as good of a target for bombing as an airplane would be, so I am not sure how much good it does.

The checkpoints, however, are next to useless for security. There is an endless supply of things that can be turned into weapons on the other side of a security checkpoint, and you don't have to be an evil mastermind to find them. They even let you bring dangerous items through the checkpoint, like the 9-cell lithium-ion battery in my laptop (would you want to be on an airplane where someone punctured or ignited such a battery?) -- for that matter, the laptop itself, which has lots of sharp aluminum inside and which could be disassembled fair easily.

What the checkpoints do is to remind people that they are not in charge and that their rights mean nothing at the airport. I had this experience myself, twice. First, I was told that I could had to wait over 10 minutes to receive a pat-down after refusing to walk into a scanner, and that I would not be allowed to use the metal detector that just opened -- all the while, my luggage was left on the other side for anyone to steal. The second time, my teammate who traveled with me tried to take a video recording of the pat-down procedure, and the guard stopped (but did not allow me to put my arms down), claiming that it was necessary for security to not let a video be taken (but when I pointed out that there were literally dozens of people watching from the waiting area ten feet away, his eyes glazed over -- he was just reciting the line some superior had told him to recite). These are not measures that enhance security, but they certainly are a psychological attack; I doubt they are carefully planned attacks, but rather they are an intended consequence of giving people who have absolutely no training in security or threat mitigation the power to make decisions at a security checkpoint.
No dress codes at bars?
Well with ECC-192 you could get a 77 character code, right? At least it's a well defined problem space and has known tradeoffs.
WiFox: Scaling WiFi Performance for Large Audience Environments [pdf]
so seriously, how does behavior like this evolve?

step 1. less-evolved spider builds random clump on web

step 2. spider achieves benefit of scaring off more predators

step 3. spider with clump-building ability becomes dominant species as it outperforms and outcompetes non-talented spiders

step 4. spider with clump-building ability builds less-random clump

step 5. repeat step 2 thru 4 until spider-like clump achieved

my question with this hypothesis is, why does the clump-building behavior end up with something that looks like a spider and not something that would give the spider an even greater evolutionary edge, like say, a tiger's face?
Well, readers of the Economist are likely better aquatinted with the TSA than the average person. They are also significantly better educated, and better equipped for rejecting the essentially emotional arguments in favour of, and accepting the logical arguments against.
Darpa LS3 Robot Mule Learns New Tricks, Loves a Mud Bath
Having trouble viewing the video but what's blowing my mind right now is that in the picture I see, it has created a decoy with 8 legs. How does it know??
First Round Capital - Holiday splash
You know, it's not entirely unreasonable that someone could package a bomb to look like a gift-wrapped paperback. So if their technology can't distinguish your book from a potential explosive via X-rays alone, it may have to get opened. Explosives detection results in false alarms, unfortunately, but as far as I know most countries do it and it rarely results in such inconvenience to passengers.

The rifle cartridge is obviously on their contraband list, so it should have been caught. Someone probably brought it through accidentally. .22 LR?
I agree, our Enterprise app still has a lot of IE7 visits.

Roughly 10% IE7, 30% IE8, 25% IE9, 17% Chrome, 12% Firefox, 6% Safari. No IE10 yet, not even one.
A motoapp that improves your lifetime of your vehicle... be it car / bike.
Why is it so hard to sign up for hacker news?
My favorite story is how he learned to program without a computer: all he had was a "bunch of graph paper to represent the memory in a computer and the display."

He simulated programs by hand using graph paper. That's commitment!