skysight-inc/HackerNews huggingface dataset:
Hashes like SHA1 and MD5 are fast. This makes them great for things like verifying file contents... You can hash a lot of data and get your answer very quickly.

This is exactly why they are not particularly well suited to passwords. A brute-force attack (since you're salting your passwords I'm sure!) against them isn't a huge undertaking. Just with the equipment in the computer I'm on right now, I'm looking at generating about 11.5b MD5 hashes per second, or 3.1b SHA1 hashes per second.

At eight characters a-zA-Z0-9, I'm looking at about 5 and a half minutes to brute force every combination with MD5. Under a day for SHA1.

Hashes like bcrypt and scrypt, on the other hand, are designed to be slow. Their complexity factors actually provide means to slow the hashes down even further as hardware becomes faster. Instead of 11.5b/second, you can increase the complexity until you're only able to generate one hash per second... Now it takes you over three and a half centuries to hash what might take one second with MD5.

Even ignoring the possibilities of MD5/SHA1 being 'broken', they're simply too fast to be considered for hashing passwords.

(Estimates of GPU hashing speed taken from http://golubev.com/gpuest.htm).
From what I gather the 42 team has a really poor view of anything web-dev related.

They have this idea of creating "hardcore devs", because supposedly they are better and if you can code hardcore you can code anything. (An idea that obviously lead to entire categories of failures, because not two systems are alike, and developing necessitate many skills, including communicating, writing, leading)

Note that this is what I gather in part by talking to a pre-selected student that didn't make the final line (nor she wanted too); and in part by reading the 3 year program of the school, the interviews.
lol, often rails sites are the ones that tend to be unmaintainable messes, specially if you use a few gems.
>> Just look at those comments

ugh, no thanks. I find the comments sections in news articles destroys my faith in humanity even more than youtube comments these days....
Facebook Reportedly Offered $1 Billion to Acquire Snapchat
What bothers me to no end when someone makes outstanding claims at being 'the best product to accomplish task x' is that they're usually not accompanied by solid evidence.

Why not film some comparative long-term lab experiments that involve more than just someone sitting on it for a few minutes, run some Autocad or Matlab simulations or so on? Perhaps even provide just a table with numbers for the metrics they used to determine that this chair is indeed better than most, if not the best? Besides the 27 degrees angle that is supposedly optimal.

Also, from what I'm aware, osteopathy is not actually real medical science, it's an alternative view/philosophy of healthcare. This is a device touted to be a preventive cure for so many problems, yet there was not mention of it being validated by real doctors. The designer himself is probably not a doctor, I doubt he would've missed the opportunity of garnering extra-credibility for his KS campaign by adding Dr. next to his name.

The unfortunate truth that most people don't want to deal with is that the best way to prevent back pain, assuming you don't have major anatomical problems, is to simply exercise regularly. It takes a bit of time and willpower to not give up after the first few seconds. I've also had some pretty serious back pain caused by prolonged sitting. Resting even more in a fancier chair or worse, in bed, did not make them go away. What did fix the issue was simply using an exercise bike for a few minutes per day.

In conclusion, I don't think you should feel sorry for not being able to easily afford spending $1.3k on a chair. Consider pressuring your boss to get an exercise bike for the office instead. It is unlikely that there'll be that much of a difference between a $200 chair and a $1.3k one.
Well the Anti longbow fear was that some English middle class yeoman could defeat a (french) knight.

I can just see Saladins PR minster issuing self serving press releases about how these franks stand 200 yards away and shoot the lightly armourd cavalry to bits.

Though haven't heard of anti longbow campaigns it was Crossbows that there was an attempt to ban by the church - did you know the first war crimes trial dates from the 1300's
Doesn't 1cc of water (at 4C) == 1 gram? Why not use 1000cc of water as the measurement for the kilo?
There is indeed a mailing list! when you move onto the final step it'll ask you (nicely and once).

The quantity bump gets shown as a warning because at some extremes the optimizing algorithm may choose to increase the overall quantity even if it costs you more than at a lower optimization level. Lets say you picked $100 worth of MCUs, and it knows it can get 30% more MCUs for 10% of additional cost - it may go for it. In such cases we thought the user would like to know.

Unfortunately we have no way to calculate the shipping at present... but the generic parts locator is a great suggestion, we'll do it!
Done! And your refund check is in the mail.
Finding a decent true 2 bed room apartment in Manhattan will cost you $4,000 too.
The Facebook "habit loop". Or how to build a customer base.
Except this isn't really 'school', it's more of a technical college. Students are going to learn a specific skill.

(I could be getting confused by how you folks in the US still call what we call university 'school' in which case disregard my comment :/)
That or a metal gear. My hopes are on the latter.
Show HN: My first "real" book came out yesterday (about d3.js)
Not to get too involved in this. But "stealth edit" just means you edited without mentioning it.

The general etiquette seems to be to put an "EDIT: " with either an addendum or an explanation of edits you made within your comment.

There is no implied perniciousness or anything, it's called that because you are effectively changing what people have responded to after their response.
BCN-London can be had for E$34 round trip. LA-MEX goes for US$400 cheapest average seat. That makes all the difference. Maybe try Tijuana, though.
What you describe is almost identical to what is outside my window behind the house. This area used to be a large dairy farm and is now mostly proportioned into 10-acre lots. I assume that before it was subdivided, it was mostly cattle pasture and some mature trees. Now, the area behind my house slopes rapidly from tall grass (we leave it in a natural state) to short thorny shrubs to a grove of mature oaks and mostly young elm trees. The older ones have fallen to Dutch Elm disease.

In the years I've lived here I have been amazed at how rapidly trees grow. The bottom of our pasture was mostly tall grass and a few tiny saplings. They are now approaching 10 feet tall and need to be bush hogged because they are interfering with the growth of grass. At the same time, the undergrowth in the area we have left untouched (the rest is horse pasture) is amazing. There are wild apple trees, enough wild grapes that I made a 5-gallon batch of wine a few years ago, raspberry bushes and stuff I can't even name.

tl;dr - I'm seeing that in my backyard right now.
SilverAir - An athletic shirt that doesn't smell and designed to be worn at the gym and for everyday wear.
demo@ http://www.yathletics.com

It's cool because:

It's made using pure silver which kills the odor-causing bacteria in your sweat, so you can
-wear this shirt for your entire day and feel fresh,
-reuse the shirt more often (i do).

The fabric is completely new and something I made with my manufacturers from scratch. Without letting cost be a factor, we sourced some of the best performance yarns you can buy and achieved a feel that is super comfortable while being lightweight and breathable. To manufacture, we use seamless knitting machines meaning the body of the shirt does not have any stitches on it. (trust me, the silver is what sells but the most loved feature by our test customers is the material and how you feel as if you're not wearing anything - in a good way)

I'm building this company single-handedly over the last 10 months, and I had to teach myself bits n pieces of everything: apparel manufacturing, design, coding, law, filmmaking & editing. The product is launching in 4 days on kickstarter and I'm now in lockdown mode with tons of progress to make. Your feedback on anything is welcome.

The online shopping experience for this brand will be fresh: there will be no choosing from tens and hundreds of products because we make just one per category with superb design, quality, and finish. Shoot me an email if you're curious about anything.
The real problem in a mindset such as that is the situation when the ground and the operator both think that each other are doing due-diligence as to which targets to hit.

Remember this? http://worldblog.nbcnews.com/_news/2009/04/17/4376383-taliba...
hyperloop.

http://github.com/leonidkozhukh/hyperloop
Yes if my farther had been in his house in Birmingham in the second world war I might not be here - the Luftwaffe was going for the almost next door spitfire plant.

Almost every European has family members who can recall ww2 and the area bombing which no civilian Americans experienced.
So then we go back to my original question. Why do you think a VPN is more secure than SSH?

IE, Why is it important that your SSH port only be connected to by known IPs, but your VPN port is OK to be connected to from anywhere?
"We have only been sitting for the last 150 years."
Yeah, right...
Cool! I made https://github.com/mahemoff/chrome-boilerplate a couple of years ago and haven't had time to keep it up to date with the latest APIs. This is comprehensive and a slick UI too. Congrats.
Well, since the game seems to be defamation, here are some news titles:

Secret weapon against journalism: College students.

Mom of Mass. journalist charged with killing teacher is heartbroken, statement says

Before killings and chase with hostages in trunk, Mojave Desert journalist’s life began to unravel

Journalist in custody for murder of Mariah Wells
This is the email I received:

Hi there,

I wanted to get in touch to apologize for the awful experience we've caused many of you on your weekend. Buffer was hacked around 1 hour ago, and many of you may have experienced spam posts sent from you via Buffer. I can only understand how angry and disappointed you must be right now.

Not everyone who has signed up for Buffer has been affected, but you may want to check on your accounts. We're working hard to fix this problem right now and we're expecting to have everything back to normal shortly.

We're posting continual updates on the Buffer Facebook page and the Buffer Twitter page to keep you in the loop on everything.

The best steps for you to take right now and important information for you:

* Remove any postings from your Facebook page or Twitter page that look like spam
* Keep an eye on Buffer's Twitter page and Facebook page
* Your Buffer passwords are not affected
* No billing or payment information was affected or exposed
* All Facebook posts sent via Buffer have been temporarily hidden and will reappear once we've resolved this situation

I am incredibly sorry this has happened and affected you and your company. We're working around the clock right now to get this resolved and we'll continue to post updates on Facebook and Twitter.

If you have any questions at all, please respond to this email. Understandably, a lot of people have emailed us, so we might take a short while to get back to everyone, but we will respond to every single email.

- Joel and the Buffer team
I fully agree with Jesus on this one, but sometimes I wonder what I would do in a situation where this belief was really challenged. I hope I don't have to find out.
> a physician

osteopath
Priority should be given to making mod_python compile for Apache httpd 2.4, so applications stuck on httpd 2.2/Python 2 can be migrated. This is likely to generate the strongest initial interest. Dropping support for Python 2 would interfere, especially where libraries are used that haven't been updated to work with Python 3.
How to use Android tablet as computer keyboard
The Salon writer seems angry that libertarian-ish organizations are even listed as allies or allowed to participate in the event. Apparently, shunning libertarian-leaners as if they were 'unclean' takes an even higher precedence than opposing illegal mass surveillance. It's almost like how hard-core racist movements consider 'one drop' of disfavored ancestry as contaminating.

In the real world of people who aren't professional ideologues, it's good to work with people on common projects even when there are severe disagreements elsewhere. Appearing together doesn't imply any general endorsement, or risk any sort of infection by diabolical libertarian heresies.
The article does not disclose what the actual 3 years curriculum will be like, it's merely stated that this is phase 2 of a weed out process that started with online cognitive skill exercises. The remaining 4000 candidates will for the next month be challenged 15h a day on computer problems. Only 800 of them will go on to do the 3 years program, which we really know nothing about, except that on the last year there's a huge project they have to work on together.

There's really nothing more than that, we don't even know if by the end of the month there will be practical projects.
This is an odd argument. Guns are technology too, are rifleman just murders roo?

Any weapon is technology, so swordsman too?

Martial arts could right be considered 'technology', so the only people who are warriors are untrained people who fight... So we are talking Bar brawlers...?

Every soldier in the US military is hiding behind a plethora of technology layers... they completely outclass their opponents... yet you draw the line at drone pilots? (how are they any different from fighter pilots?... it's not like the US has ever engaged anyone capable of shooting them down)
I'm not pravda, but my bullshit detector is going off too. I'm even willing to tell you why.

Your kickstarter campaign contains 90% marketing fluff copy, with a small section on what your chair is supposed to do. However, it only claims to do things, instead of explaining in detail how the chair does things; it doesn't compare postures and such between "normal" office chairs and your chair; it doesn't cite any papers on effects; it doesn't cite any studies on effects of even similar products.

You throw out a massive promise and ask a bunch of nerds to take you on faith. That's not going to work.

Lastly, chairs and other sitting implements have been around for at the very least 6700 years, so please be precise in what you talk about: http://en.wikipedia.org/wiki/File:CucuteniNeolithicChair.JPG

Addendum: I want to believe you. I want to have a chair that actively makes me healthy, because i know my current sitting work makes me unhealthy. So please take this to mean that you need to do a much better job at explaining and proving how your product does this, not that i wish you to go away.
This is really the type of innovation that education needs. Providing solutions for a broken system is very much like putting lipstick on a pig...without the proper infrastructure that can provide the support and challenges that students need, no amounts of interaction, collaboration or analytics will make significant changes (with emphasis on significant).

Although there is a good chance this isn't a "perfect" solution, it's a huge step in the right direction, and I'd like to see more government funding going towards trying new approaches vs funding something that hasn't worked well in a 100 years.

Upvote and a high five to all entrepreneurs working in this field :)
so where does shooting a unarmed teenage girl who wanted an education come?

Or using human shields and violating the red cross /crescent both of which are war crimes not woo it's a drone so it must be bad
What language are the examples in?
1 cc of water is very nearly 1 gram, but not exactly. A few centuries ago, they were definitionally the same; now they're merely very similar.
Who chose that yellow, and why?
Just to clarify, in the UK osteopaths aren't physicians. Osteopathy is pretty clearly in the alternative healthcare camp.
Hi Joel, any thing you would recommend other devs who're connecting with facebook or any other social media API to look into? maybe you can share what you guys have learned reg: security and how to do it better from this
1. PHP's configuration isn't simpler in any way, it's just that the insecure method is already configured by default, so you don't have to set it up. Python doesn't have such an insecure method, so the (trivially easy) configuration is app-specific. And that's a good thing.

2. Yes, if quick and dirty is all you want, just use PHP, there's nothing wrong with using the right tool for the job. Personally I prefer quick and clean though, that's why I try to avoid PHP.
Sure it's the right thing to do. Apple is designing iWork for the 99%. Some of those features may be added back when they can implement them properly across all versions of iWork, but I wouldn't be surprised if they don't. I think Apple is taking steps to make inroads in enterprise and I think they'll be successful. Numbers is never going to replace Excel for an investment banker, but it's not intended to. Most people in Corporate America don't actually need Word or Excel to perform their job, it's just what IT departments bought and that's the standard.

For 99% of enterprise users, there really isn't a barrier to switching to another productivity suite. It's mainly just institutional inertia from the IT departments. Their concerns will be alleviated as well when Apple keeps building out tools to make their lives easier, like the recent volume app purchasing made available. And most importantly, the total cost of ownership is going to look different now that OS upgrades and iWork upgrades will be free going forward, making iOS devices and Macs more enticing a choice.

edit: Matthew Panzarino discusses what Apple is going for with the iWork changes.

http://techcrunch.com/2013/10/26/stop-freaking-out-about-iwo...
Lightbeam for Firefox: Privacy Education for Users & Open Data for Publishers
Ask HN: What Do I Do if a Client Refuses to Pay?
I contract for a company that took on a client project that has ended up severely over-budget and over-schedule. The short version of events is that the timeline was quoted assuming 3 developers, but one left a few days in and the other lied on her resume and sucked at everything, including straight content entry - leaving just me to do all the work in a timeline meant for 3 devs. No one else was hired until the past 2 weeks.

Understandably, the client has not paid the company I work for since the start of the project. Meanwhile I've been averaging 80 hour weeks trying to get things done in a rush. I took no holidays, a single sick day, and have completely lost my entire summer to this project.

When it was clear we weren't going to make the second deadline, I started capping my invoices at 40 hours per week instead of the actual time I was working on the project so as not to bleed the company. Soon after that, they began skipping pay days (for me only), or only paying partial amounts.

The company now owes me more than $10,000, my wife is rightly on my case about the whole thing, and they don't seem ready or willing to pay any of the outstanding amount.

Two new people have been hired in the past 2 weeks to help finish this project and handle other work that I literally haven't had time to do on this schedule. One of those people has both tech and management experience and has truly helped me fix the final parts of the project into an actionable plan that the three of us can complete quickly.

I've met with my manager and owner of the company on three separate occasions and I've always come out feeling like they listened and the financial situation would be taken care of. Each time I find myself grabbing my own ankles on pay day again.

So I ask HN - what would you do? I need to fix things, preferably without losing that money (we're broke now).
Who here is suggesting malice? Assuming he believes he is doing what is right, a natural answer to your second question would be that he simply actually believes it is necessary in order to protect national security, and that this overrides any other concerns he might have about the programs.
Education in South Korea is often cited as the reason for their economic growth, but that doesn't quite match up, as discussed in this article:

http://www.spiked-online.com/Printable/0000000CA640.htm

There's also this article which talks about the downsides of their focus on education (for example, 40% of graduates are unemployed four months after leaving university):

http://www.economist.com/node/21541713

My personal take is that their economic growth and rise in test scores are both the result of the way their culture is set up. South Koreans tend to be extremely competitive and live under constant pressure to outperform their peers. For students this means that they study harder and for longer periods of time to do well in tests which makes them get some of the best scores around the world. For working people this means working an unhealthy amount of hours (South Korea often ranks at the top of the charts when it comes to measuring working hours) which is the most likely explanation for their economic growth. Both of these facts also contribute to South Korea having one of the highest suicide rates in the world.

Furthermore, I think there is a key point when it comes to education. South Korea is doing great at tests because that's what they're training for. Their education system centers around doing well in tests, not necessarily about learning the right concepts. There is a very big focus on memorization and they care more about doing well on a test than on actually learning. It is not uncommon for them to focus on memorizing previous exam questions to get the right answer rather than actually understanding the concepts to be able to correctly answer questions.
How can you make sprint planning fun?
Was Stefan's app actually rejected by Apple or something? That's what's implied by the title but the post itself makes no mention of it.
> This is a problem, because the weight of the IPK is the kilo.

A kilogram is not a unit of weight, but a unit of mass.
Great question! I'll try and go over all the costs for you here:

Annual Inspection: ~$400

Insurance: $17/mo. for just liability, $130/mo. for full coverage.

Hangar Fees: $0-$500/mo. (varies greatly on location. Our plane has removable wings and can be stored in a trailer, and is small enough where you can rent 1/2 or 1/4 of a hangar)

General Maintenance: ~$50/mo. There are maintenance procedures at 25 hours, 50 hours, 75 hours, etc. that are pretty simple on our plane and all called out in the maintenance manual. At 500 hours the engine needs a top-end overhaul, which we do for free, and the 1,000 hour complete overhaul is factored into the hourly operational cost.

By aviation standards these are pretty low costs. In comparison, a bigger plane can have a $1000+ annual inspection, and an older plane can easily cost hundreds a month in maintenance (this is the big drawback to buying used, which is a popular way of getting a plane at an affordable price). It's hard to give a confident number for monthly costs with price variables such as insurance and hangar fees, but these are all things pilots need to think about and plan for.
They are actively trying to discourage "10 minute to write fart apps"

It looks like you may have looked like you fit in the category of "copied a web page into a tableview, hit publish"
Here's another one: Bagel Pizzas. Slice a few bagels, spread pizza sauce, cover with pepperoni, olive slices, mozzarella cheese, and bake on a cookie sheet for 10 minutes until the cheese is melted.