skysight-inc/HackerNews huggingface dataset:
Chances are extremely high that if an attacker gets the hashes, they also get the salts. Since knowing the salt is necessary to authenticate against the hashed password, any application that has access to the hash also has access to the salt, making the salt just as likely to be compromised as the hash. A hash with an unknown salt is just as useless to a legitimate application as it is to an attacker, so there's really no point in trying to store salts "separately."
BIOS init time on my chromebook pixel is absolutely a killer. The "OS verification is turned off" screen appears instantly, but then I have to manually press ctrl-l to make seabios start loading, and seabios isn't particularly snappy about loading then picking the harddrive so grub can kick off. That whole process takes maybe 4 seconds which I think is a bit absurd.

My solution of course is to just suspend/hibernate instead of powering down, but it is a little disappointing that I don't get to play the "fast boot" game.
yes, all my friends are saying this distrokid looks great, but its missing dance stores.

OTOH we all hate BeatPort, and iTunes really is not important. I only care that I get on boomkat, but I care about music more than I care about sales :) I've been on frontpage beatport, juno and boomkat. nice to take a screenshot of, but it doesn't translate into much money.

Beatport is kind of like iTunes, its been getting less and less strict about the curation. usually if you have a distributor agreement then you can get in that way. but honestly I haven't checked recently. maybe you can just apply.

they have huge problems with people buying tracks from other people (so they didn't even produce them) and buying soundcloud views to pump up their stats. and the music is just dull. but they still get in to beatport.
When I graduated college and moved into the corporate world, I remember being shocked that managers got little-to-no management training. But that seems to be a very common problem. They may go to rah-rah corporate meetings, but they seem to rarely get much practical training.
Agreed, this is both too little and too much in the same Kickstarter.

So there is a pretty nice FPGA + Dual ARM9 chip, the Zyng7020 which is used in the Parallela and the Zedboard[1]. This has a pretty decent amount of FPGA fabric, and it could use an open source frame buffer to go along with the core. One of the hugely annoying things about Xilinx parts is that their design flow is insanely over complex.

That said, the comments here and elsewhere point out another interesting dichotomy. There are people who want a fully open Tegra4, and there are people who just want a frame buffer they can program. The latter is an undergraduate FPGA project, the former is a multi-million dollar team effort.

When the two groups talk about what needs to be done there are heated arguments of 'too much' or 'too little'.

These folks seem to have a design already "done" (in the sense that they have used it for some customers), I'm wondering if a more effective path might be to team up with Xilinx or Altera to put together some IP that that can be part of their design suites for free that would enable non-corporations to implement a decent frame buffer. That would just be a port of what they've got and perhaps some design notes around it. Get Digilent to build a demo board and poof, your good to go.

[1] www.zedboard.org
Agreed. Although seemingly true, this article makes you wonder twice whether this has any scientific basis.
As I read the article, the AG is targeting AirBNB, not individuals. The article calls the subpoena, "part of an investigation into whether the company is breaking the law by allowing its users to rent rooms in private homes." It certainly seems reasonable as part of such an investigation to determine the scope of illegal activity, which would require finding out fine-grained details on individual hosts.
What industry doesn't have incompetent management?
Thanks for this post, very interesting. Personally, I badly want to get out of the software / "tech" industry, and get into the space industry some how.

I have no idea what I'll do, how I'll do this, or what I can offer. Only time will tell.
Well, all those instruction prefixes mean that decoding x86 instructions is really hard. That leads to more cycles to decode, for a larger branch mis-predict penalty. And your decode unit takes as much power as your integer cluster (which is still small potatoes compared to all the OoO resources). And you're limited to 1 decoded instruction per cycle when executing instructions brought into cache for the first time, before the processor can tag the boundaries (but again, most instructions are executed many times).
Is the site slow?
Pivotal to Ring the Bell at the New York Stock Exchange on Oct 29
Probably from raiph. I saw that he mentioned that several times on Reddit. Also see the comments on my blog post: http://blogs.perl.org/users/steven_haryanto/2013/03/dont-wai... (18 months).
The London 2012 logo was a pile pants :)

Fortunately, once the games kicked off people forgot about the logo and it was a very successful event by all accounts and there was a huge buzz in the air with everyone (I'm a Londoner). Still can't believe they paid that much money for that!
The way the SCSI layer is implemented in Linux, fsync() (for that matter O_SYNC I/O) doesn't really flush data to the non-volatile platter on disk. Too much of a performance hit if it did that all the time.

http://thecodeartist.blogspot.com/2012/08/hdd-filesystems-os...
Your comment is timely because I spent more time promoting this post than writing it. Compared to the last blog post on the blog, it got 100X the traction after ~3X the promotion effort.

I completely agree actually. The relationship between frequency, quality, promotion, and traction on a blog is fascinating.
learning to code is easy than understand code and review, but understand code more important than code. If you understand code - you know all. Try to understand linux kernel code or gcc
Why my Start-Up Failed
Post-mortem on why my last startup Vitoto (a collaborative video app for iPhone) failed.
You should start playing with flying robots
You should start playing with flying robots
Any Rockstar North devs on here? Give us a wave! You deserve a pat on the back.
Junk Removal to Trash Out Services By The Junk Guys
The Junk Guys specializes in Junk Removal Phoenix, junk removal and junk hauling are provided in the Phoenix Metro Area.
How are extra 32bit words considered "inline"? Wouldn't this completely miss using the register for count evaluation?
Not necessarily.

Corporate culture is defined in large parts by the people who started the company. It's the first few, and to a smaller extent, dozen, and smaller extend, 50, etc people that will define your corporate culture. At a large company, such as the one (I'm guessing here) discussed in the article, corporate culture can be VERY resilient to a few bad apples.
Yes if you do unsafe things you can be fast. There is a hilarious open issue that google refuses to fix - critical information required to boot is written to a part that is battery backed. So if you have your pixel in developer mode, and have installed linux on it, just close the screen and and let your battery drain to zero - your pixel will become non bootable. All of this because storing this information in TPM where it would be persistent would "slow" down the boot. Speaking from experience - my pixel has lost data three times because of this.
So interesting to see start ups that help w this kind of remote collaboration. An interesting example of globalization. Now a band can be in Toronto, DC and Hong Kong at once. I wonder if the music will be more diverse and interesting
http://www.mrmoneymustache.com/2012/05/29/how-much-do-i-need...

See also:

* http://www.mrmoneymustache.com/2011/05/18/how-to-make-money-...

* http://www.mrmoneymustache.com/2011/04/26/why-hardcore-savin...

* http://www.mrmoneymustache.com/2011/06/06/dude-wheres-my-7-i...
Facebook’s vs Twitter’s Approach to Real-Time Analytics
Jockey (and only Jockey, as far as I know) used to have a Y-front, which is one of the reasons they never sold well in Canada. I still completely ignore the brand even though they changed to a more typical fly a couple of decades ago.
Ask HN: How to prioritize a start-up blog
I'm at an early stage with my company, head down in dev work, customer interviewing, and MVP building/iterating. However, I want to be smart about prioritizing marketing early and often, so I've been wondering about whether I should be investing time in blogging and if so, how to go about it.

To me it seems obvious it would be useful, but it's just a prioritization or basically a marketing ROI decision - I have to ask myself if it will be any more effective than getting 1 on 1 interviews through my network or through light marketing spend. (TBC, I mean references to friends of friends, linkedin, and facebook ads to generate beta testers and interviews)

Right now, I'm leaning towards not worth it. The investment to produce good, rich content is large - and the payoff will not be immediate if at all. So if I can get customers in some more direct way, I should do that until it is exhausted.

However I've seen other posts on here about how becoming a 'thought leader' in the community and getting your name out there was clutch to your initial marketing push. So wondering other thoughts on this?
This might well be a dumb question, but why don't we have 128 bit processors?

No advantage? Crazy expense?
The term “y-fronts” never caught on the US because American underwear maker Jockey convinced the buying public to use the term “Jockeys” instead.

I'm pretty sure I have seen "y-fronts" in US shops and in the movies. The post specifically mentions that people call them jockey briefs in the US.
Just to be sure that you are who you claim, can we quickly take a look at the colour of your pants?
You can start here: https://github.com/hermanhermitage/videocoreiv/wiki/VideoCor...
Sometimes, I just want to eat ice cream, but Windows Phone puts me on a diet
I should have been clearer. I was talking about the cache hierarchy and CPU memory pipes. I suppose there's a divergence in main memory too, with CPUs using DDR3 and GPUs using GDDR5, but as you say you can just throw cache at that problem.
People typically end up in management via promotion. But they are not promoted because they would be good managers - they are promoted because they were good individual contributors.

The folks who might make good managers (because they have better people skills, not necessarily better technical skills), often struggle as mediocre individual contributors, and never get promoted.
And that's relevant to what proportion of the user-base?
I have been using it as my main phone every other week since release. TBH, I haven't run into bugs so much as curious features (or lack of features). Are there particular bugs you keep hitting? If anything, it seems a bit more stable than my Cyanogen-running Nexus.

The worst "feature" offender I have found is that when talking on the phone, if a call comes in, the screen activates. If the phone is close touching my ear, it has a habit of picking up the incoming call without any notification.
Can someone explain the underlying technology:

What makes Mischief tick?
Mischief uses Adaptively Sampled Distance Fields (ADFs), originally invented and developed by Ron and Sarah at Mitsubishi Electric Research Labs and further enhanced by 61 Solutions. ADFs are a new digital representation of shape which provide numerous advantages including high quality anti-aliasing, very fast rendering, support for massive parallelism, very small file sizes, and the ability to succinctly represent variable-width, scalable, textured strokes. This technology is protected by over 50 patents.
I am a guitar aficionado... this app would be great.
Remote collaboration with high quality audio online can allow for interesting new music ideas to float.
If someone has penetrated your security enough to get the list of hashed user passwords it's assumed that they've got the salt as well. Salts aren't really considered "secret" and they don't make it harder for an attacker to crack a specific password, they just make it harder for the cracker to reuse his work against all the passwords in existence.
Well, yeah, that's the easy way. :)

This is mostly to illustrate a technique of "parallel processing using fifos and split input" It's almost like a miniature mapreduce running locally. See also "bashreduce" (https://github.com/erikfrey/bashreduce) which I didn't write.
But as in all things, Anton makes a controversial set of assumptions and approximations w/r to long-range electrostatics so it's anyone's guess whether their approach is valid or not.

All that aside, Anton is a wicked cool piece of hardware able to accelerate their approximation of traditional molecular dynamics by a factor of 50 over GPUs and up to a factor of 500 over CPU clusters, hitting milliseconds of simulated protein time in a single trajectory.

And since it's the only hardware capable of simulating a single monotonic trajectory out to that timescale, it's challenging to compare it to other approaches.
I am also a light sleeper. I lived in the centre of the city for almost three years. I used to get woken up at all hours. I started off with earplugs, but those hurt my ears. Eventually I started shutting my windows and curtains and putting a powerful fan on and it really works well.

Edit: a bonus one gets with the fan is that it also cools you off during summer when a shut window might have caused problems otherwise. (Aircon is uncommon here.)
I understand that. But what I don't know are the capabilities of those other, older systems that once tracked the kernel source. Do we have the same assurances there?
Front-end: Angular, as it is great.
Back-end: Rails, its what im familiar with.
Db: postgresql
Bootstrap 3.0 -This is a great and well designed library.
sass
Sounds like the author was acquired as well: "I’ve accepted a Software Engineer position at Planetary Resources starting in November"
As to the sounds -- it's not a perfect fix, but combinations of ear plugs / ear-plug-style-headphones / white noise can do wonders, both during sleep and in noisy offices, or when helicopters/leaf blowers/etc. are going.

When construction in Manhattan starts at 7am on Saturday, it wakes me up, but I put the ear plugs back in and turn on white noise and I'm fine. When I'm at work and there's a helicopter or union strike or noisy coworker, I throw in the in-ear headphones (they form a seal) and turn on the white noise app on my phone. It totally sucks we have to do these things, but they can help a lot.
I think beginning big programming boom on the west
I had a whole other paragraph about that, but took it out because I figured that most people on HN wouldn't even know what NMR is, let alone NMR structure prediction.

These guys have collectively done so much stuff that it's impossible to give a fair accounting of it all in a brief post.
You can't legislate rats away, but with appropriate tools you mostly can legislate the fight part away.
If it was a small dodecahedron, like about the size of a dice, you would see those three faces unless you closed an eye.
This post reminded me of pg's advice for how to get startup ideas. Compare:

"I have 5+ side projects. I’d like to make businesses out of them, but I often lose interest after a couple weeks. Asterank was the only project that I’ve stuck with for over a year, and it paid off even though there wasn’t a clear path to monetization... It’s hard to predict what will be valuable as a side project. For hobbies, working on what you’re most passionate about is the best way to get a return." [1]

"Live in the future and build what seems interesting. Strange as it sounds, that's the real recipe." [2]

1. http://www.ianww.com/blog/2013/10/08/lessons-from-getting-my...

2. http://paulgraham.com/startupideas.html
I understand this research to say: if there exists a simple mutation that is hugely beneficial, it will spread fast. This does not mean every beneficial change to the DNA we as intelligent beings can come up with can be expected to have most likely already happened in the course of evolution. The article acknowledges this at one point, but some of the further discussion in uninformed by this issue.
For the inline bits, that'd be GitGutter: https://github.com/jisaacks/GitGutter
Lumitrack: Low Cost, Precise, High Speed Tracking with Projected m-Sequences
There's no particular advantage to having 128-bit integers or pointers. 128-bit or larger SIMD has existed for 15 years or so.
Where exactly is it useful? Double is already an overkill in all multimedia operations, and finance folks use fixed-point anyway.
BlackBerry VP unloads in epic email thread with shareholder, analysts
Native Advertising Landscape
Previous discussion (of an earlier version of this article?) 461 days ago:

https://news.ycombinator.com/item?id=4201233

Readers who are interested in following up on the professional literature on human intelligence and IQ testing are invited to dig into the "Intelligence Citations" bibliography

https://en.wikipedia.org/wiki/User:WeijiBaikeBianji/Intellig...

in Wikipedia user space.
Web Experience Toolkit – Open source web framework by the Government of Canada
Going back to my earlier point, its success relies on people not seeing it. So I would think its ability to pass a code review would ultimately depend on how many other lines of code it has to hide amongst. If you are reviewing a huge diff and this is hiding somewhere, then OK, maybe I buy it, but it's pretty transparently wrong.

Another test it fails: even if it were == as they are trying to make people think, why would this return EINVAL only if the user is root? There aren't a lot of real world examples where you would want that. It pops out right away as a bogus check that makes no sense, and surprise surprise, it also sets the uid to 0, my guess is in a place where it makes no sense to even look at uid, and very superficially hiding as a "rookie mistake"...
I didn't read the articles, but sample of one (a.k.a. ancedotes) don't pique my interest - Root beer can take away your social anxieties if you think it's alcohol.
this project has always impressed me. keep telling myself that i need to browse the source to see how it was all done. congrats jake!
I think that should civilization collapse a lot of behaviors will begin to make a lot of sense. Hopefully that never occurs.
When everything is critically important, nothing really is. If you ever find yourself in a company where they foist this on you, or offer banal platitudes like "we work hard and play hard", don't walk, RUN, in the other direction.

Life's too short to waste your time on this sort of thing.
The postgres null comparison gotcha
Please read about our latest findings regarding the pitfall of comparing null values via equal or not equal operators when issuing off postgres queries:

http://engineering.coachup.com/postgres-null-comparison-gotcha/
But again, that's situational. This particular macro is confusing because it (1) looks like an identifier and (2) doesn't act like one, instead being a 1970's style platform identifier that (3) no one actually uses in favor of constructs like __linux__ or __GNU_SOURCE__ or whatever.

But the more abstract point is that macros allow you to provide abstractions that do look just like an identifier (or function call, etc...) and do act like identifiers in the context where they're used. And that this is a good thing, because that kind of syntactic flexibility is useful in defining domain-specific languages that make the expression of hard problems clearer.

Adding a bunch of "!" to those DSLs isn't helping anything.

Basically, we have a macro that was abused here. Your solutions it to make it harder to abuse macros, mine is to accept the occasional abuse (with a "don't do that" in most cases, those here it's a backwards-compatibility problem) in exchange for more clarity on the hard stuff.
Wait really!?

I hadn't installed a linux distro that wasn't a *buntu since Gentoo ~8 years ago when I started a new job a couple of months ago. They gave me a Lenovo laptop, and when it came to picking a distro I thought I'd try Arch.

I just followed the beginner's guide[1]. Apart from the first bootmanager I tried (uefi is a new experience for me) not working right everything just worked as easily as you'd expect. Wifi worked ootb, graphics acceleration was as easy as installing the right driver package. For anything else I wanted to install (eg xfce) I just read the wiki page for that particular package on the arch site, and did what they said.

I was actually blown away at how easy it was to install a command line "do it yourself" distro. I'm guessing from your comment that's not the standard experience then :-/

[1] https://wiki.archlinux.org/index.php/Beginners'_Guide
Salts are usually not stored separately. The password checker needs to access both the password hash and the password salt. This means that there is one set of privileges(whatever the password checker has) necessary to get both the hash DB and the salt DB. Therefore any attacker that has the password hash DB also has the Salt DB.

Ideally, every password will have a different salt,

More than ideally, the only way it makes any sense at all is if they are different.

As an example:

User: bob password: password1 password hash: 12345

User: sue password: password1 password hash: 12345

with salt that is the same for all users:

User: bob password: password1 salt: 7 password hash: 22345

User: sue password: password1 salt: 7 password hash: 22345

with salt that is different per user

User: bob password: password1 salt: 7 password hash: 22345

User: sue password: password1 salt: 8 password hash: 32345

Per user salt means that an attacker who has stolen the password db can't crack one password and unlock 100 accounts because they all have the same password hash. That is the only point of a salt it serves no other purpose.
Every node has a copy of every message. If the whole internet used this, everyone would have a copy of every (encrypted) email.
A public TrueCrypt Audit
This is an example of a very old tactic, traffic analysis.
Ars has now done about a dozen of these articles. Unfortunately I think they are somewhat misleading, in that they don't emphasize what exactly the threat is that these password crackers represent.

This is an offline attack that allows the attacker to recover the plaintext from hashes. In the context of the internet, the impact of this type of attack on the end-user can be almost entirely mitigated by using unique passwords on each site. A site which has leaked its password hashes is almost certainly already fully compromised, so having the password to that particular site gets the attacker not much. It's only when those passwords are reused that recovering the plaintext becomes a big additional win for the attacker.

The implications of these articles is that you should use some super complicated random password. Indeed that's a good idea. I personally use lastpass to generate long random passwords. But if there's a choice between using one really good password all over the internet versus unique, but mediocre passwords on each site, the latter is a better choice. After all any particular site could be a honeypot or store your password in the clear.

On the flip side, if these articles are aimed at developers rather than end users, then they should be emphasizing using a modern key derivation function with an appropriate work factor.
Am I the only guy rooting for Snapdeal? I mean yeah, currently
flipkart is better than snapdeal, but snapdeal has better pricing and variety in products,Snapdeal needs good engineering talent now,specially with their search and filtering of products.