skysight-inc/HackerNews huggingface dataset:
What you are saying makes total sense as a founder. But for an engineer there us no motivation to move to an area where there are not many opportunities.
| And mortgage interest is tax deductible.

In some jurisdictions. Not Canada.
They could have. More remarkable to me, though, is that no one's criticizing the transition itself. Everyone is saying, "I liked vWorker better."

I guess it isn't that surprising, when I think about it, though. I knew Freelancer existed. If I'd wanted an account there, I would have already had one. Still, I'd think there would be more people who said, "Oh well, the new site's nice, too."

Judging from this comment thread, people have mostly just . . . left. It's a shame. I liked vWorker.
This is the same obsessive minor attention to detail that turned Apple into a multi BILLION dollar company.

... and well deserved at that.

I say good on you Gary, its people like you who push the world forward, continually looking for ways to improve things no matter how minor.
Review my startup idea: disrupting the Trading Card Game industry
I'm a big fan of trading card games like Magic: The Gathering, and Cardfight! Vanguard, from the story being told by the cards, to the possibilities available with each draw of a card. However, I live in a city that doesn't have a game shop where I can find people to play with, and I can't drive.

There are three main questions I want my product to answer.
1. How do I make it easier for publishers to create awesome games for both iOS and Android?
If I want TCG publishers to make versions of their game, I feel it's my job to make the API smart so the developers can worry more about the look and feel and not the details. I want the API to "know" the rules for each supported TCG, along with card effects and rulings, keeping track of life points, and stuff like that.

2. How do I make it easy to find people to play with, both online and in real life?
At the heart of the product is a social network, where players can add cards to their collection, build decks, get deck advice, talk about individual cards, set up games, and more.

3. How do I make it easy for people to add cards to their online collection? How do I spot counterfeit cards?
My first thought was to use a customer's phone, and using an OCR provider, but I'm not sure how to spot counterfeits, I'll keep working on it.

If you have any questions or comments, please leave a reply or send me an e-mail. Thank you for your time and consideration.
I think my favorite part of this is learning that after I finish with my bitcoin mining rig, I can use it to crack passwords. Awesome...
Thanks for your advise! I will definitely try different wordings to see the difference but so far the conversation rate is not bad tho.
Right there in the same field as the password:

<salt>::<hashed_password>

The pepper on the other hand shouldn't be in the db. Hardcode that into a config file.
People also spend ~$50 dollars a day for the tickets. The Burningman organizers arrange for medical care and infrastructure concerns before any of that cool shit even happens. And that's for living out of a god damned tent.
In NY state, I think the main cost of the house is going to be property taxes. I don't recall the rates, and don't care to look them up. But I do recall (when the subject has come up) that my sister-in-law in Alden, NY (small town 30 miles east of Buffalo) pays ridiculously high property taxes in comparison to what we pay here in Redmond, WA.
Bitcoin is going to go up in flames, and all these people buying worthless bits are going to be out quite a bit of money.

And many will laugh, because we all told you so.
How Michigan took hackathons by storm.
Electric car company Better Place shutting down
Scrum vs. Kanban vs. Scrumban: Team Members, Meetings, and Roles
The issue is practicality. Which is why pbkdf2 (and increasing the rounds each year) + bcrypt or scrypt is still a better option.
Great conversation between Kevin Systrom and Diplo
50 posts about cyborgs
Which is why passwords just shouldn't be stored with simple hash functions. Even a naïve salt+iteration method would have drastically slowed the attack.
Off-topic, but how does it work that when I load that site I get an advertisement for The Lorax (http://i.imgur.com/y6eke4T.jpg), a character with whom John Dryden happens to share several key features? I understand showing ads by keyword (the alcohol ad as alcohol is mentioned in the article several times...) but facial similarity based advertising?! I'm speechless.
It actually says in the open Caesar page that it is intended to be a 'near copy' f the original and one of the changes they are making is to walker AI- 'they just go where they're needed now'
Yes, you're right. I do think comments from both cultures are reprehensible, but the ones from other Chinese people do not seem to carry the same prejudice — at least from the translations I've read. You don't, for example, have other Chinese people calling the 15 year old boy "Ding Dong," as one of the NBC News commenters did.
I can only relate here and I have seen the things you mentioned in the Forbidden city and the Great Wall as well. Not too long ago I was in Thailand (Pukhet), in a hotel resort for a couple of days off, and a couple of Chinese tourists came from the beach and washed their feet in the hotel swimming pool where everyone was swimming. Not embarrassed the least to do that. While there was a special hose, labeled and clearly visible for this particular use a few meters away for people to clean up their feet when coming back from the beach.

On another occasion, while flying domestically in China, I saw a guy just a couple of seats away from me on the left spitting on the aircraft floor several times during the flight. I was like... "huh?". I can kind of understand people spitting on the floor, outside, but in actual public transport? Seriously?

I have no idea what is going through their heads and why they even think it's remotely acceptable to do this. Would they like it if someone did it to them?
Goodreads OAuth Library for iOS
After struggling to get OAuth working for goodreads in an iPhone app I am building, I finally got something that works and decided to make a library of it that can be easily dropped into an XCode project. It's available here: https://github.com/yjkogan/goodreads-oauth.

Pull requests, feature requests, and bug reports are all desired! I hope some people out there find this helpful.
I noticed the exact same thing. It was rather annoying. For example, in the word "like" (as in "And here's what it would look like fixed") the "li" had joined into a single shape.
Without salts: Generate table of hashes vs. Plaintext for all plaintext up to certain length. Maybe use rainbow tables. Now, for each entry use this table. Time to get plaintext of n hashes is constant.

With salt: Generate table of hashes vs. Plaintext by appending salt to each possible plaintext of given length. For first entry use first salt to generate this table. Table is now useless for second salt if it is different. Time to attack n hashes scales linearly.
The salts provide their primary benefit (rendering rainbow tables useless) even when the attacker possesses the salts and the hashed passwords.
Agreed -- would love to know how this goes!
The article clearly explained that using more salts was preferable to using a global salt and did a good job of explaining why. They didn't come out and say that a per-user salt is best, but that's the natural conclusion of the argument they developed.
Since it's a REPL, probably so.
that's the classic traintoilet design across the world. only recently have toilets in trains been replaced with chemical ones - adoption was driven by high speed trains.

nothing particular about india in this little bit. i agree with your overall assessment though.
A reminder that the imbalance of 3px may be intentional:

It means that the post is closer to the comments are closer than to the user, and it pulls your eye more naturally to the comments than if they were perfectly equal.

Sometimes asymmetry is a useful design element, too.

Edit: I noticed that lukeholder has said the same thing.
But then it's not Bitcoin. It's another fucking dodgy 3rd party payment provider.
And to think you wasted even that much more time making this comment! Your time is leaking everywhere!
Facebook is probably built in a much mote modular way. I doubt fixing it would break anything else. Facebook engineers should be able to figure this out very quickly.
Absolutely, and many smaller artists and indie labels chose not to offer their catalogue on those platforms.

I didn't intend to offend the users of streaming services. I subscribed to rdio myself, only as a tastemaker though - I still buy a lot of lossless music.
I hear you and indeed, if we're to believe his claim, the benefit would be substantial. Yet, I don't think this detail is what jacques_chester was referencing in his comment. It's difficult to dispute Rob's claim without either having experienced the benefits ourselves or having an authority back him up.

We're left to wonder exactly what Rob was cooking for himself when he got off the juice. I support Soylent, but I don't believe you necessarily have to feel this way with only access to mostly whole foods.

Whether or not you enjoy cooking is irrelevant, especially if we stand to gain all that Soylent promises. Soylent won't deprive anyone of the option to cook a meal. If anything it may simply add more value to the act of cooking.
To be fair, the number of users that read his blog vs. the number of users that use Facebook is a little bit different, and the amount of attention that should be devoted to each should vary accordingly.
Did you tell them to stop it? I think a lot of problems like this would be solved if someone worked up the courage to speak up. It could have just been a major misunderstanding. Maybe they really didn't see the hose or thought it was only used for emergencies. I've seen people of all races do stupid things.
"A year ago, the University of Michigan’s hacker community lay dormant. Today, it is a force to be reckoned with." - says who?
> "we're a satellite office town at best"

This, sadly, describes almost all of Canada, not just Victoria. Even vaunted Toronto has few homegrown software companies and an ocean of satellite offices of American corporations.

As an expat I frequently wonder how I'll ever go home. Doing so not only means taking an enormous pay cut (>50% at this point) but also giving up my front-row seat in the industry. My ego can deal with the different paycheque, but my passions will never square with the rest.
In related news, Larry Page now demands to be addressed as "Father Comstock" when in the GooglePlex.
The point of the salt is to prevent precomputing the hashes (a rainbow table). Per-user salts take this a step farther, so that even if two users choose the same password, they will have different hashes.

What the article really points out is what people have been saying for a while now, that if your passwords are exposed, salting really doesn't add more than a roadbump to a cracker if you are computing your hashes with fast message-digest algorithms like MD5 or SHA.
"His blog" is the template for the entire Posthaven network.
Forget "give them cash." Let's understand the priority of severities here. These people are in physical pain. So much pain that the concept of money eludes them.

Pain. Nourishment. Kind eyes. Belief. Shared experience.

Magnets force you to walk right up to people, with yr fancy CS degree, and say: You look hurt, and this may sound crazy but: MAGNETS I KNOW HOW THEY WORK.
I can build a shed too. I wouldn't live in a shed, though.
Salting would definitely make a difference. The point of salting is to increase the complexity and overhead of generating rainbow tables.

The first mistake here is the use of MD5. MD5 is flat out broken. Do Not use md5. Do use bcrypt.

In your db, you can store the salt right there....next to the hash...

How a salt increases the complexity is quite simple. If a attack has a giant rainbow table, the salt causes him to increase the size of his rainbow table and the space required to hold it and the pre-processing time to generate it. For example

Here is what your database might look like with a 3 byte salt

password : salt

hunter2 : 100

qwerty1 : 101

Here is what the attacks rainbow tables will have to look like

qwerty1 : 101

hunter2 : 100

qwerty1 : 100

hunter2 : 101

hunter2 : 103

qwerty1 : 102

...

..

.

That's about it. There are other purposes of the salt too but other people talked about those ones.
I was helping a designer-only friend of mine with the implementation of a basic website theme. After an hour of trying to talk them through how to use the github app (let alone git command line) I gave up and we just used dropbox.

The point being, sadly, I think that we're a ways off before the average non-technical person is comfortable using git.
Right.

Using MD5 hashes was done as a relaxing constraint -- at the other end, the attackers had tightened constraints by getting limited time and computing power.

The goal was to show how attackers work and think.
You should know that New Relic is already doing this with Rails versions right now
Absolutely not. Like I said, the point of the salt is not to provide a "second password" that needs to be independently stolen. It's to make the results from a cracking attempt on one account useless on the password of another.

If you've read the article, you have a pretty good idea of how it works without salting. You have a list of N password hashes, and you come up with candidate passwords. You run each candidate password through the hash function, and compare the resulting hash to your list. If it matches any of them, you've got the plaintext for those user accounts. The key thing here is that you only have to hash each candidate password once, and you can compare that hash to as many accounts as you'd like.

Now, let's add in a salt. It's stored next to the password, so after stealing the password db you've got a list of password hashes, each with its own salt. In order to check a candidate password against a particular user account, you have to append that user account's salt to the candidate, then hash it and compare against the stored hash. That part isn't any slower. The problem is when you try to take that hash and compare it to other accounts. Even if two users have the same plaintext password, their password hashes will be different because they have different salts. The end result is that you have to hash each candidate password fresh for every user.
I meant that the formatting mentioned in the article was done when you chose to do it (by executing a command) rather than automatically as it recognized the syntax.

I guess I'm asking if you object to the formatting itself or the automation of it.
That point is brought up often, but don't forget that while touring might work for your average indie rockband, it's not as easy for obscure ambient, experimental musicians. Music that is primarily intended for home listening is a lot harder to sell as live performance.

Again, I don't intend to offend the users of those services - just saying that Spotify, rdio and co. alone won't work for many artists.
Malice and incompetence are equally dangerous and harmful.
Seriously? That's utterly irresponsible. I hope you aren't a CEO.
Or because none of their contributors who only installed hg to submit a patch had read the entire hg manual.
Github issues powered comments
While I agree with you in that we shouldn't stereotype, this is a cultural issue, not a racial one. Like the top level comment above this states, a Chinese Canadian is going to have vastly different customs. The article is referring to inconsiderate trends in Chinese culture, not Chinese race.
Some people want to try liquid feed. Here are some already existing companies making liquid feeds:

http://ensure.com/ Ensure

https://www.nutricia.co.uk/fortisip// Fortisip

http://www.complan.com/ Complan

http://abbottnutrition.com/brands/abbott-brands Abbott Nutrition Brands

http://www.medifast1.com/index.jsp Medifast

http://www.optifast.com/Pages/index.aspx Optifast

http://www.slim-fast.com/products/ Slimfast

Soylent make some claims about world hunger. As the article mentions Soylent is currently expensive. Their crowdfunding level was food replacement at about $7 per day. That's way outside the range of the 20% of the world population living on less than $1.25 per day. The main ingredient of Soylent is water. Unfortunately, about a billion people do not have access to clean drinking water.

Hopefully with mass manufacturing they can get the cost down. And they could plow back some of the profits into providing clean water.

There are other worrying things about Soylent.

> For anyone who struggles with allergies, heartburn, acid reflux or digestion, has trouble controlling weight or cholesterol, or simply doesn't have the means to eat well, soylent is for you.

> Soylent frees you from the time and money spent shopping, cooking and cleaning, puts you in excellent health, and vastly reduces your environmental impact by eliminating much of the waste and harm coming from agriculture, livestock, and food-related trash.

From (https://campaign.soylent.me/soylent-free-your-body)

Lots of 'problems with digestion' are going to be serious illness for which liquid feeds are used. It is irresponsible for Soylent to claim to be safe for those people without extensive testing.

There's no evidence that a liquid feed replacing all meals will put anyone in excellent health.

The product uses agricultural products. As the article mentions, milk proteins are significant impact.

Soylent also claims to have a shelf life of years. I'm still very curious about this. Many micronutrients will not have a shelflife of years. vitamin C needs to be kept in the dark, in an airtight container, away from heat and moisture.

It was a mild irritant when it was one guy experimenting on himself (but giving out the recipe for other people to follow along). Launching a product from that with these claims, especially that there's "much evidence", is irresponsible.
I have noticed that most flame wars happen over small things; not simply bc they matter, but bc the opinions are so simple that everyone has one.
I can definately think of immigration cards/interviews as a case where that is true.
Modern Day Alchemy - Researchers Turn Cement Into A Metal
Don't know. However, $40M valuation implies 7% of YC companies have revenue run rates greater than ~$2.7M per year (i.e. assuming a price of ~15x revenue) In other words, 93% of YC companies have not made it to ~$2.7M per year in revenue.
As a Jew, I find it stupid. But people like stereotypes. I guess it's comforting. But the distance from this to anti-semitisim is not that far. Jews are not similar even by their religion. There are ultra -orthodox anti-zionists, there are atheists, there are north African Jews, Asian Jews, Eastern European Jews etc. all have different traditions and probably are more similar to their immediate social group than to each other. Even worse, Israelites don't like American Jews (eg loud, vulgar and obnoxious), which is probably what this stereotypical and horribly simplistic description is based on. So please, lookup racism or at least antisemitisim before writing such a piece (a 'positive' twist does not make it less of a stereotype, and those are dangerous).
Call me radical, I think we should legalize both all drugs and all graffiti. To be honest, I don't think this should be a big deal.

We should teach the cycles that civilizations have gone through, we should teach all we know about former civilizations, but I don't think we should treat their old stones as sacred.

I think we should build new, ontop of the old. You can't build something new without destroying the old, sometimes.
The Excel thing started out as someone else's funny tweet and turned into me riding the bomb down while waving my cowboy hat, Slim Pickens style.

This tweet started the ball rolling:

https://twitter.com/sachinag/status/329701402546941953

The spreadsheets use no VBA or AppleScript or external code -- just Excel formulas and the functions Excel 2008 offers. I submitted the first four spreadsheets along with my "real" (Python) code/answers for set #2, just for the shock/horror value.

Later, despite what I said about giving up on Excel, I implemented the Mersenne Twister PRNG and single-block AES encryption (all three key sizes!):

https://twitter.com/areuugee/status/333344208154923008
https://twitter.com/areuugee/status/334142574296199168

One of these days, I'm going to start a blog just so I can write a series of posts about Excel. There are definitely limitations in what the design allows you to do, but it's more powerful than anyone gives it credit for. It'll also be cathartic to share how I made the AES and Mersenne Twister spreadsheets. (Spoiler: The C preprocessor was involved.)

That said, I don't think the Matasano people have to worry about me solving more problems in Excel. Programs that I could bang out in five minutes in Python turned into all-day, profanity-laden affairs with Excel, which turns Excel into a distraction from the crypto stuff.

Also, if anyone decides to give Matasano's crypto challenge a try, it's a great opportunity to learn a new programming language or a great excuse to get better at a programming language that you don't know so well. My Python knowledge was pretty minimal at best (the only languages I've ever really cared about are C, Fortran, Perl, and [spit!] PHP), but now I'm much more comfortable with it. In fact, if I ever finish, I might go back and redo everything in Ruby just to learn Ruby...
While we claim people are addicted to FB etc because of their devices, it's somehow okay to let developers drive themselves mad so that we can ask 10 years later: So what IDE do you think axed your brain?

Startups will categorically enfeeble more people than any war. And we'll do it in the name of GTD and competition with our own machines.
A commit isn't really "in" a branch in git in the same way as it is in hg. In hg, each commit "belongs" to a branch (I'm remembering correctly here, right?). In git, a "branch" is basically a variable pointing at a specific commit. A commit can be part of one or many branches (or even none).
Subject-reported mood on (n=1) trials were last considered scientific circa Sigmund Freud. And we don't know what his regular diet was.

Different people react differently to different foods, even the same food at different times or under different conditions. His remarks there read a bit like some stuff I've read by the proponents of, variously, vegetarian, paleo and keto diets.

I don't eat breakfast, as a rule. I used to get peckish in the mid-morning, now I don't get hungry until lunchtime. Not being hungry helps me concentrate. I hardly see this as the basis of a new way of life.
First, you do not have any hard evidence that this happened. Like most people making this claim and linking to Wikipedia, I doubt you even know the name of the primary source in which it was claimed - let alone that you have any way to corroborate the claim. Second, the purported event is separated from the Iranian revolution by several decades (53 to 79). Third, the Iranian revolution actually incorporated cooperation from ideologically diverse parties who were betrayed and liquidated by the subsequent leaders of the revolution. That liquidation was not the doing of the US by any stretch of the imagination - and certainly is not a direct result of anything that happened in 1953, even on your assumptions.

You are repeating a standard, oversimplified revisionist history which makes the US singlehandedly responsible for Iran's entire fate for all time, blatantly ignoring any other historical, regional or Iranian factor.