skysight-inc/HackerNews huggingface dataset:
I pay for dropbox for dedicated storage. it will be there. How long until the first stories of people not being able to get their files back out of BT Sync.
Also they don't talk about the hidden cost, that I assume you have to use a lot more of your HD to store other people's stuff and a load of your bandwidth.

Remember this system works by using all the clients as the server farm. And for that kind of system you need more redundancy than normal, so you're probably paying many X gb in harddrive space what you are storing on it. Want to store 10gb on it? got 30 or 40gb to spare? if not, stick with trusty reliable no hidden costs dropbox
Not entirely: I enjoyed reading your comments here (and I agree with them).

It's a warm welcome amidst all the American 'work work work work work life balance' culture that's prevalent on HN (for understandable reasons, after all, most of HN is American).

There's no point in telling each other all the time how you can't do a startup (or good/interesting software work in general) unless you put in 70 hour weeks for two years straight, so I like reading the occasional counter argument, such as yours here.
Highly unlikely. Wordpress is the opposite of simplicity, its highly configurable and thats (one of the reasons) why its so widely used.

HN or hacker community is a very small community and its hardly the microcosm of the internet.
First of all no one can be sure about such a thing. Secondly why would you not just get a second temporary job on your vacation days. In fact if you're so desperate for money do you have a second job already?
Hahaha, you're a hacker at heart. I think most people, having said "in order of risk," would do high to low, but you did it in the canonical way.
They may have been working, however there's zero guarantee that they have been learning anything new or even spending hands-on time doing engineering work (as opposed to shuttling between meetings).

I interview 2-3 candidates a week, including many people almost twice my age. While these older engineers have impressive-sounding resumes (IBM, Sun/Oracle) most struggle to code anything more complex than fizzubzz. In my case I make it as easy as possible for the candidates by allowing them to use any IDE they can install on my Macbook and encouraging them to search Google/StackOverflow if they get stuck because I want them to be comfortable and actually complete the task. Majority still end up with trouble implementing a simple JUnit/Selenium automation test for a login page.
I can appreciate what wordpress has achieved over the years, and what it has helped to create. But the current wordpress code base is a nightmare to work with, and doesn't scale well.

Having said that, it is an excellent blogging platform and CMS, but this is something that is usually forgotten, resulting in it finding itself shoehorned into the most inappropriate places.
The attacker doesn't "update" the length. The attacker appends data to the message, which has the effect of turning the previously stamped message length into just another bunch of bits in the middle of the message, and then includes their own message length at the end. The final message must accurately represent the length of the original message including the shared secret, so there's trial and error involved, but it's just trials of "possible length of the shared secret".

Again, this works on MD4, MD5, SHA1, and all the SHA2's.

You shouldn't have deleted your comment. You're not expected to know this stuff. Very few people, relative to the whole industry, or even relative to the number of programmers who end up trying to build crypto, actually do know how a length extension attack works.
why you think you will not be able to compete?
I am similar age and really don't see age as issue if you can do the job. Even money is not something you need to compromise
You shouldn't make ridiculous claims like that without knowing the facts. That isn't how BT Sync works at all, have you even tried it?
SLAPs OP in the face come to your senses man! Old is wise harness your skills to develop new ones. The dodo that can not fly shall go extinct no matter what the profession.
Is that the wiki page that computer language designers link to when compiler developers complain that they have no clue how a pet feature would actually be implemented?

As it stands what you've done is attacked the logic of the argument, as opposed to giving so much as a weak suggestion of how the problem would actually be solved.
True, in fact many universities offer a dedicated "business computing" degree which seems to be a CS degree with a lot of the theory stripped out and some business modules added.

Though these courses often have a stigma amongst people who consider themselves "techies".
That's a lot of jumping to conclusions there.
$ cd /home/somedir
$ python -m SimpleHTTPServer

You'd still have to open up ports on any firewall you're running, and there's no user access control, but it's a quick way to serve up a directory over a LAN.
Also: according to the article, the winner asked 22Cans to make the video public. Otherwise, we would never have known what it was about.
I don't know how someone can even attempt that tone without having a clue on what one is on about.

"The 28 days statutory (UK) leave compared with 25 in Greece, France, Austria, Sweden, Luxembourg, Finland and Denmark, 24 in Malta, 22 in Spain and Portugal, 21 in Norway and 20 in Italy, Belgium, Germany, Cyprus, Ireland, Switzerland and Holland."
Then Yahoo probably didn't get the 'unspecified extras' as well.
Awesome!

It's pretty much winning the lottery.
Te verde propiedades beneficios
propiedades del te verde mas beneficios
So, just for fun, I googled "event table planning". No paid ad for his app appeared.

However, a quick scan through the first page shows he did get at least three freebies: two of the four image results are screen shots from his homepage, and the second search result is his site and includes a to-the-point abstract.
Doctors and lawyers gain skill as they get older because the problems and solutions don't change quickly, and the fields have such depth that expertise takes decades to acquire. We work in an industry where the state-of-the-art is perpetually accessible to 20-somethings who haven't done anything, because the technology gets blown up once a decade (or so). Even if you stay up to date, why would anyone pay you a salary commensurate with your experience, when a total noob can do the same work for half as much?

For example, it's pretty embarrassing that we're re-inventing databases because today's generation of "experts" can't be bothered to understand SQL. And don't get me started on how an entire generation of coders will be able to work professionally without knowing how to manage memory. It isn't difficult to find examples of youth and exuberance trumping wisdom in this field -- I've already encountered working developers who are happy to tell me how technologies invented in the early part of this decade are "totally outdated".
Is it looked down upon if you don't go up in the ranks as you age?
I'm only saying this because your entire point is about being pedantic with the language, one of the definitions of steal[0] is "to appropriate (ideas, credit, words, etc.) without right or acknowledgment." In this case, whether its a copy or not is immaterial. I've seen a bunch of people parroting the line that if you're not taking a tangible thing you're not stealing. This is plainly false both by connotation and denotation.

0: http://dictionary.reference.com/browse/steal
Laser diodo
laser diodo para la depilacion
I witnessed three different engineers in two different companies turned down late in the interview process by upper management due to their age.

Prior to that I ran the technical part of interview and green-lighted the candidates. The problem is real and when it happens, whatever skill set you have is irrelevant.
As a fan of many games by Bullfrog (especially Theme Park, Theme Hospital and Dungeon Keeper), I wanted to create an open source clone for Theme Park.

Eventually I've decided to leave it for now. My research is summarized in the following post: http://kshahar.blogspot.com/2013/05/an-open-source-clone-for...

I hope this could help someone to have an easy start.
http://www.templeos.org/Wb/Demo/Lectures/64BitAsmQuiz.html

I wrote a 64-bit assembler and compiler. Lots of people know 16-bit. Nobody knows 64-bit.

God says...
shonest banished ON cause digits Shut Who Angels sovereign
tosses because_I_said_so awesome project Ambrose fine
lastly pwned Replacement searched suck
Man and Van N11, N10. Hire Man and Van Colney Hatch, Barnet
Yet another high cost social signal that people woe over the loss of.

Kramer had it right. Good riddance.
I want to teach Online Marketing for free
Marcademy.com is thinking about creating a Fellowship program to teach for free Online Marketing and Growth Hacking to 20 - 40 SFO/Bay Area college Seniors during their senior year. Program would be 8 months (Sept '13 - April '14) and include monthly in-person weekend immersion events teaching them to become a Growth Hacker and Online Marketer. There would be no cost to the students. We'd get paid by an employer if we got them a job when they graduated. There would be no obligation that students would have to take a job from one of our sources. So for the student it would be entirely free. Would like thoughts on this.
One of the sharpest developers I have ever worked with -- was 63. He did only mobile development and only would agree to work 30 hours a week. When I pressed him on it, he explained that he liked to constantly be working on both Android and iOS projects, 30 hours a week each, and that kept his backlog of waiting clients happy.

EDIT: He completed the iOS application under budget with wonderful tests.
A post-console world: a dedicated gaming machine has become outdated?
I am not sure why there is so much hate and vitriol against Peter Molynuex's ... uh, what did you say, "arty farty". On the comments for the Engadget article, there were lots and lots of incessant comments about his pretentiousness. People reacting with cringes. What is up with that? It's like listening to a bunch of middle school kids at an art museum.
> The comments also apply a lot to Iran and Iraq.

No, it doesn't. I don't disagree with you on the whole (and certainly appreciate that you are even attempting to understand the issue, which is more than almost anyone does), but like neebz I think your narrative is very simplistic and out of touch with reality.

Islam is not as powerful in the "Islamic world" as you portrayed. Taliban is the exception, not the rule.

I currently live in Tehran, and TBH I personally know less than 8 people (less, because it's been a while since I've talked to a few of them) who are supportive of the government, or in general of Islamic rule. And the number of "religious" (as in, religion is more than something theoretical for them - you believe in Quran, and even though you don't follow it's instructions, the mere belief gets you a place in paradise) people I personally know is probably no more than 20 (most of them friends at college).

The reason for Islamic rule (at least in Iran), is not because they have the support of the people, but simply because they have the money and power. You don't sell hundreds of billions of dollars of crude oil every quarter and get rich and powerful, only to allow to be overthrown! You do everything you can to prevent that.

I hate typing on iPad, so, please read the rest of what I wanted to say in this comment https://news.ycombinator.com/item?id=4820604
Once you are choosing salts that is almost level 4 knowledge. This is one of the problems with "raw" PHP development, there's no way to say "this is a password field, make it secure" only "hash this with algorithm X".

To be fair though , I believe recent releases have addressed this and frameworks like symphony give you a default user class to inherit from that does things sensibly. It also sticks a seed for the salt directly in the config file (where devs will see it) and says "make sure you set this randomly and keep it secret".
Future Shlock
It would be good if this listed the level of completion: openCaesar3 and OpenTTD may be both be under active development, but the latter has been playable for years (active development is mostly on features the original never had) while the former says it isn't "still not quite playable."
If you have a crypto heavy app I recommend the fast and easy to use correctly NaCl project.

http://nacl.cace-project.eu
I'm guessing MaggieL is not a Sir? All the more interesting if so.
I think that the assumption of the New Yorker that Airbnb is only for twentysomethings is not correct (I can't speak about Uber).

I'm 33 years old and living in Europe. Between my passions there is dancing tango. This actually involves a lot of traveling to international festivals where to meet and dance different people. There are many of these events and many dancers are really dedicated, traveling around a lot, sometimes almost every weekend. In this situation it gets really helpful to travel on a budget, even if there are not many people in their 20s in the community. As a result Airbnb is getting the de facto choice for the community of the 30-40 years old international traveling dancers.
Yes, I need to include a bit more information. But sometimes it's just hard to find it. I'll mark openCaesar3 though.
But that's the rub: You can buy and use a device fairly anonymously. Although systems like Thin Thread, as they are described, seem to be able to attack this kind of anonymity, and there are a variety of other attacks possible, that's not the same as a pen register or wiretap, and it takes significant resources to make it work in practice.

4G voice is just data, so that it can be end-to-end encrypted such that, as far as is known, calls can be made secure against any attack. There is no "man in the middle" with access to clear data.

So you say that should not be illegal. Good, so far. But that also means that it is out of reach of law enforcement, and can even be made safe from "rubber hose" code-breaking.

That's what I mean by a stark choice. There is no middle ground. The algorithms exist and that can't be undone. If you put your documents in a safe strong enough to keep a mafia or foreign spy agency out, you can keep anyone out.

Should that be illegal? This isn't just a hypothetical. Any businessman or government worker traveling to places that are corrupt or have repressive governments would be a fool not to guard important documents and communications this well, and the tools are readily available.
Show HN: A new approach to Android list Adapters
This is true in most fields. In the officer ranks of the military, you're generally forced into retirement if you're passed up for promotion twice. In many government jobs, you're forced out if one of your former subordinates is promoted past you.
1. A service with the word "torrent" in it will never be adopted by a corporate entity. (edit: "typical" corporation. Technology companies don't count)

2. You may be overestimating how much the average person cares about file storage size, 3rd party servers, or transferring large files.
Well, I suppose I can only quote Larry Page on this:

--- --- --- ---

He also noted that he has also been sad with how the industry has been unable to advance the Web as quickly as it could have because of a focus on negativity and zero sum gains. He also noted other companies like Oracle and his difficulty in working with them, “Money is more important to them than collaboration.”

--- --- --- ---

As for your feeble attempt at diverting on the law issue: Look, Apple has more cash reserves than the US government. To act as though all that is needed is lawmakers "finally doing their job right" is ludicrous. The reason why I cannot go bug the lawmakers is because they have dozens of lobbyist per capita throwing money into their faces all day long.

At the end of the day, I believe in human progress. Human progress happens when we are fair and kind to one another. Apple doesn't need all of that money, just as Google doesn't need all of theirs. Asking them to give a tiny bit more back to the society that they are a powerful member of so that everybody is better of is far from being as silly as you try to paint it.
The protocol functioned perfectly through that episode. The miners split into two camps, each who supported a fork, and the longest fork won.

That's not a bug, that's a feature.
1. BT Sync needs to be open sourced and their security practices need to be peer reivewed

2. No version control in BT Sync like Dropbox has - killer feature in Dropbox IMHO
I didn't read the article but my first thoughts on seeing the headline on HN were "Linkbait!... Wait, why is a Forbes article being promoted on HN?"

I do not get it nowadays. Such articles from Forbes and other sites are mindlessly promoted over here and they don't follow any HN guidelines! Just there to get traffic and increase page views.
http://gigaom.com/2008/01/22/wordpresscom-creator-raises-29m... maybe? Not sure.
That's not true, every time a founder becomes a parent they build shitty solutions to all those problems too :)

But seriously this whole angle frustrates me.

Who decided that Silicon Valley had to be held over hot coals for building software companies that solve problems and make money. Why does it always read like "they alone inherited the problems of the universe, and are choosing to build dickpic apps instead".

Everywhere in the world there are smart people working on dumb things. In SV there's lots more smart people, but the percentage doesn't change. Also some things look dumb but are actually genius in hindsight, so it's easy to criticise these as problems for twentysomethings today, but fast forward a decade and they're 'problems for the masses'
It used to be, but the industry is changing. The status of programmers is going up and that of middle managers is going down. As Silicon Valley goes today, so goes BigCo tomorrow, and woe betide the BigCo that does not. That's the theory, anyway.
I'd say they are optimizing locally. Yes, if you could write Cobol in the 70s/80s, you better optimized on writing Cobol, because it was all the hotness. But you should have stepped out of this local optimum somewhere in the 90s, and switched to OO languages. Moving away from what you already know in favor of something you don't yet know is painful if you are not used to it, but it's necessary - dinosaurs die.
svbtle is very nice and clean
Secret suffix MACs are insecure if your hash function isn't collision-resistent. To illustrate: MD5 isn't collision-resistent, but HMAC-MD5 has no currently known viable attacks, because it isn't simple a secret-suffix MAC.

So it's true that using a secret-suffix MAC is safer than using a secret-prefix MAC, but if you know enough to make that choice, you know enough to use HMAC.
Startups tend to try to solve problems they are familiar with. So 20something founders, are likely working on something 20somethings face.
Do you have any advice/pointers for someone who is looking to get started on this path?
One of the best engineers I have worked with is on his 60's. When I worked with him, the rest of the engineering team had an average age of 23 or so (me being 32), but this guy could give everyone a run for their money.
This is not about age, but about staying current and sharp. Keep learning, and you won't have this issue.
Sure, a guy fresh out of school has a ton of energy and works crazy hours, but as an Engineering Manager and Product Manager I knew that if I needed something to be really done on time I could always trust the older (and quite frankly way smarter) guy.
Duplication - A bit between your teeth
There's something that strike me as a bit off in what you write. I'm having trouble pinning it down, so here are some vague thoughts:

* The world does need more crypto. There's market demand for keeping stuff safe/hidden/whatever.

* It is hard to get crypto right. People like the author, and if I'm not mistaken, yourself, keep pounding that point home. Ok, we're convinced... but people still need to do this stuff, and not all of us have the money to hire you.

* "just a little bit literate ", given the above, seems kind of dangerous, no? It seems that way to me. Why bother learning just enough to get yourself into trouble?

* Given the above demand, people are going to try this stuff one way or the other. It seems the best thing is to give them the safest building blocks. The cited example in the article seems indicative: the companies were all trying to do more or less the same thing, which was not something complicated. Why wasn't it easier for them to do the right thing?

* I think what the world needs is easier, clearer, proven open source solutions/recipes to common problems.

Also, another thought that is not related to you or what you wrote, or write: is it just me or do a lot of security discussions turn into dick waving contests? Why is that?
Most new companies fail, but not all. Apple and Google were founded by twenty-somethings, and in the early days, nobody was certain what they would become. The key is to keep trying stuff, even ideas that might seem unusual.

One group that displays much 'irritating self-regard' are east-coast pundits who write on subjects they don't understand.
Thanks, I looked up Merkle Damgard now understand the comments about padding and how they would affect things.

But I was specifically thinking of the following scheme:

Message: [length][key-value pairs]

Hash: MD5 (shared secret, message)

Assuming that the rule is: the length is at the start of the message, and only "length" bytes of the message are used after the hash check passes.

It seems that if you have found a hash collision, Merkle Damgard lets you find more collisions easily. But the exploit in the article doesn't require a hash collision. If you haven't found a hash collision, would the above scheme be vulnerable to length extension?
I'll hit 40 this year, and have been in more demand in my last five years than I have earlier in my career. I think there are engineering areas & companies which really don't need anything more than a recent graduate. For those needs, it doesn't make sense to hire someone at higher salary and experience levels. However, there are technical areas that strongly benefit from experience. I can't really advise what those areas are exactly. It depends on your personal history and interests, and there are a lot of short sighted companies that don't value experience enough - to the detriment of their own efficiency.
That generally leaked in from other industries, but it seems to be going away. Since great developers are productivity multipliers ... companies are starting to understand that keeping them coding when they are 25x more productive than an average coder is worth more than having them manage 8 average developers.

There is a reason "developers" are getting hundreds of thousands of dollars in retainment packages to keep them from starting their own shops.
I think it depends on the division you work in. Some guy working in the networks/infra team may get better work/life balance than someone else in the front-office development team. I work in the latter and I must say the hours do suck and you tend to be drained when you get back home after work.
But I believe that if you have a strong will and good work ethics you can still manage to work on side projects in the evenings and week-ends. Hard but feasible.
Sure, but then what are they saying? "Dont use cryptography" is a quotation taken verbatim from the OP, and I've heard similar statements all around in the last few years. A reasonable person reading that statement would interpret it at face value: "Don't use cryptography" means that very thing.

So what I'm suggesting is that the "don't use crypto" meme should go away and be replaced with something more helpful and more specific. For example, the responses you've given on this thread have been both helpful and specific. I'm arguing that people should say the kind of stuff you've said, rather than the unrealistic "don't use crypto."