skysight-inc/HackerNews huggingface dataset:
I just added a comment basically saying the same thing. But you should use data that you would have that an attacker would not. First and Last Name as stored in your system, User ID (like 128912) and User Creation date are good choices. These should be in a separate database from the hashes.
consciousness, i.e. the thing that you are and what comprises everything that makes you you, is an emergent property of the interplay of all those little particles you're made up of. the preservation of those individual constituents according to the laws of physics bears no relevance at all regarding the question what will be preserved of you in any meaningful way. the answer of course, is nothing. deal with it. it's painful, but we will overcome it someday, when we're ready to deal with the implications of it.
Get this story and many more in top5HN Newsletter. Signup at http://top5hn.launchrock.co
Telegram Messenger #1 iOS US social app
The real Super Mario Bros. feels that way as well. This is due to Mario's very shallow acceleration curve. It's one of the main reasons the game is so challenging to play!

Edit: After having watched the video, it appears to be out of sync and dropping frames.
ShowHN: nvlope – Email with an API
It could be devastating to their business. Facebook is in a tough spot, they are done or nearly done growing in the US and much of the developed world. Most of this fraud seems to happen in emerging markets, the exact same ones much of their "growth" is coming from. If growth numbers go negative or even flat Wall Street would run away from FB faster than you can cancel an advertising campaign.
Get this story and 4 other in top5HN Newsletter. Signup at http://top5hn.launchrock.co
This question isn't that bad, so why the downvotes? I'd like to see a comparison between Julia's performance on an in memory dataframe against the same data in an SQL table. Julia should have the advantage but how fast is it really?
This might just be one of the greatest replies I've ever read.

Also, I aspire to attain your stature. I'm a fan.
Sweet, going to use it for my LAN-Parties!
professional development is wide or deep knowledge better?
A hardcoded value like that is actually known as a 'pepper' -- cute right? If you google 'salt and pepper cryptography' you'll get your answers on why pepper is, at best, a good addition to salt, at worst useless. Sorry, Sunday morning, feeling lazy, no link to give :-D
Read Daniel Quinn's Ishmael:

http://www.amazon.com/Ishmael-An-Adventure-Mind-Spirit/dp/05...
Eric S. Raymond only gets $20/mo on GitTip
If the 'common-salt' length is counted as part of the total salt length, then an attacker who knows the common part of the salt could more easily generate a rainbow table (as half the salt is predictable).

If it's just added (but not counted), then it'd be like asking for a password (XXX) and always prepending something to it before hashing (saltyXXX) -- at which point -- what value are you getting out of it?

I don't believe an /uncounted/ common salt is harmful - but I don't see any use on its face.
As an interesting data point, watch the settings and backgrounds crowds in Dirty Harry movies to see what San Francisco looked like in the 70s.
"Defaced again? Yep, good job reusing your passwords morons jack67834#

owned by certified unethical software security professional
Obligatory link: http://attrition.org/errata/charlatan/ec-council/
-Eugene Belford

P.S It seems like lots of you are missing the point here, I'm sitting on thousands of passports belonging to LE (and .mil) officials"
From my experience working with the commercial (for-profit) conference sector, I've never seen any organiser hand over a list of email addies to anyone. They are jealously guarded as a core asset of the business.

They do quite often (heck, all the time, in fact) do "swaps", where they will mail another org's piece to their own list in return for the same. These emails will usually seek to get you to give up your contact details in return for something (a whitepaper, an interview transcript, even the conference brochure), thus adding you to the new org's list as well.

But the key point is you should always be able to unsubscribe from the first org and hear no more from them or their "marketing partners".

I think most would see it as unprofessional, bad business and cavalier with regard to privacy to actually give lists of email addresses to other organisations.

Of course, there are also some very big conference organisers out there, and they may well be pushing all sorts of unrelated events through their in-house lists. Once again, a simple unsubscribe should do the trick.
You mean the nude people in the picture window?
Why many smart people don't get the support they deserve
True for all national currencies but hardly for the world-reserve-currency. Here you have the following reality instead:

> generally as the supply of dollars goes up, the price of a loaf of bread goes hardly up in any noticable way, financial assets / Silicon Valley valuations / houses go up significantly (so the country thinks they got "wealthier"), and bread-loaf prices in USD-aligned weak-currency/underdeveloped/perpetually-"emerging" economies go up quite significantly

Not to worry, dollar supply inflation greatly delays consumer price inflation on your shores thanks to the massive oversupply of USD already circulating all over the globe, looking to find a way "home" ;)
I remember the incident when the League of Legends server got hacked and the attackers got all the passwords in plaintext. After that my google account almost got hijacked because I reused passwords - lesson learned :D
(To be honest, I didn't expect one of the largest online games to have such incompetent programmers)
This guide is a must for everyone who handles user passwords.
> But you should use data that you would have that an attacker would not. First and Last Name as stored in your system, User ID (like 128912) and User Creation date are good choices.

These two statements contradict each other.
It's not like that. Correlation does not imply causation only in the strict meaning of "imply", =>, in mathematical logic. But correlation is sure as hell evidence for casual relationships. Just yesterday I found a blog post by author of "Think Bayes" book explaining that nicely.

http://allendowney.blogspot.com/2014/02/correlation-is-evide...

Moreover, with good enough correlation data, you can even determine the direction of casual relationship if you're willing to do a little bit of maths:

http://lesswrong.com/lw/ev3/causal_diagrams_and_causal_model...

Also, http://xkcd.com/552/ ;).
As in, refuse to allow their browser to talk to sites on the Internet?
Even if Facebook was a scam... You don't put $600k in before you know what you get out of every dollar you put in.

This is why you outsource your SEO/SEM/ Social Marketing. (To someone reputable who is results driven/incentivized )

He needed someone to say, "hey look you put $5 in you got 10 cents out. Time to move on" before he got to $600k in spend.
Sometimes I think Ray runs into the risk of becoming some sort of a PR mascot for the company...
Occasionally in an HN discussion, people say "Microsoft was a bad monopolist, but they've changed their ways". Please bookmark this article for the next time such a thought crosses your mind.

Same old Microsoft.
For the unenlightened among us, why don't you just step us through the logic on exactly why this is odious.
Likely the reason was what is described in this video (topped HN some two weeks ago): http://www.youtube.com/watch?v=oVfHeWTKjag

TL;DW: there are tons of India/Bangladesh/Brazil-based spammers (those "buy 1000 likes on FB for $1" etc) who allegedly in order to prevent being caught by fraud detection algorithms, are liking whole array of random pages.

Edit: didn't see this was posted already later on this thread.
However, a exec can make one decision that can save / make a company millions or billions of dollars.

I understand how the current situation is justified. Two questions though:

1. How much of that is down to the skill of the exec? A sibling comment addressed this problem as well: If there are many people who have roughly the same likeliness-of-success, but comparatively much fewer positions for such people to fill, then income basically becomes a lottery. Lotteries are not a basis for a system that achieves distributive justice.

2. Taking an additional step back, how reasonable is it to have people in such powerful positions in the first place? After centuries (actually, millenia) of experience, we decided that by and large, concentrating too much power into few hands is a bad idea in politics. Especially with large corporations, where the boundary between political and business positions becomes rather fuzzy, it is reasonable to ask whether the same lessons apply there as well?
The ideas of singularity are based on extrapolating from the past (progress of technology). If you extrapolate from the past human lives, eventuality of death seems pretty inevitable for many generations to come. Which extrapolation you choose probably says more about you than it does about the world.
Don't you just wish every city and place could just stay the same forever?

No.

"Losing its soul" = Changing in a way I don't agree with, and maybe I'll try and use government to stop the change. I'm more important than the people causing the change.
ZeroVM is very interesting, but my intuition would be to put the Docker container inside the ZeroVM, instead of the ZeroVM inside the Docker container. Is my intuition weird? Perhaps I misunderstand ZeroVM.

My train of thought would be that you'd put the strongest isolation on the outside.
Exactly. Probably the fact that we are told to accept it as a "natural order of things" is one of the reasons we haven't solved death yet.
As highlighted before in the top topic on reddit of the past weeks (VIDEO) http://www.youtube.com/watch?v=oVfHeWTKjag
In general, using the defaults (mcrypt_create_iv() using dev/urandom for the salt and bcrypt with a work factor of 10 are specified with PASSWORD_DEFAULT in the curreent implementation) along with password_needs_rehash() will keep you up to date with no "retouch" necessary. When the default changes, password_needs_rehash() returns true, and you then rehash with the new defaults. All you need to do is make the db column wider than necessary for the current defaults to put maintenance off into the future. (The only real problem is that the hash function truncates passwords at 72 characters at the moment, which will force you to pre-hash the user value with something like SHA256 for very long passphrases.)
Making the password comparison depend subtly on other fields seems like a bad idea from a maintainability perspective. Lots of reasons to update name, etc., which might not happen anywhere near the password code, and might be done automatically.
For causation, you need A/B testing -- real A/B testing (randomized controlled experiments).

Not everyone understands the need for A/B testing and not everyone understands how to do A/B testing.

I recently worked on modeling to forecast revenues for a large multinational. One of the variables that was essential for an accurate model was whether prior data came from before or after the company hired their current A/B testing guru. With the new guru, revenues rose every week. With the previous "guru", changes by Engineering had no impact on revenues.
I haven't read Lakos' book sad to say.

Since it's a little old now, can anyone tell how well it still stands up today? Are there any rules/guidelines from the book that are outdated?
I'd suggest "The most human human". It's unfortunate that those calling themselves "futurists" somehow seem to think that being alive forever... is kind'o shallow.

Death may be inevitable, but hopefully those who preach from the pulpit, have a little more depth to them and have hopefully examined their lives more carefully than to simply say, I'll just live forever. In that sense, I think Jobs had the right idea. If life were "infinite" or even significantly prolonged (i.e. 10 times the current life expectancy), I think we'd have a lot of thinking to do to come to terms with such a new reality.
Awesome. I've been fighting to unsubscribe from things for 3 years. From catchall filters that insta-delete to battling inscrutable unsubscribe pages, I'm pretty close to no spam.

I wish I could unsubscribe from everything at once.
SF lost its soul when the Native Americans settled the land.

Then it lost its soul when the missionaries arrived and stamped out all the Native American culture.

Then it happened again when the ranchers showed up.

Then another time when the US won the Mexician-American war and got rid of the old "Yerba Buena" name.

Then it really lost its soul in 1849.

Then it happened again when the US Army and Navy made the bay into a military town.

Then those hippies and gays showed up and ruined SF's tough "Iron in War" reputation.

Then the Mexicans caused the Mission to lose its traditional German-Irish-Italian soul. Oh, and those groups killed its soul earlier when they moved in, too.

And then they opened the ballpark and suddenly SOMA was no longer a charming cluster of warehouses anymore. Also when Noe Valley lost its working-class roots.

Did I miss any other times the city lost its soul?
> Which extrapolation you choose probably says more about you than it does about the world

Exactly, i.e. you can't just go and extrapolate stuff at will, lest you end up talking like that guy: http://xkcd.com/605/.

Some extrapolations are more valid than others. There are casual reasons to believe that the rate of progress will continue for some time. There are no reasons to believe that death will always be inevitable (sans the thermal death of the universe stuff, but I'm sure we'll figure something out by then).
Portrait of a porn star Duke freshman stands behind her alter-ego
> If life were "infinite" or even significantly prolonged (i.e. 10 times the current life expectancy), I think we'd have a lot of thinking to do to come to terms with such a new reality.

I'd be happy to spend next few centuries thinking about this problem.
How to make the best music video with After Effects -Watch this
This is the stupidest limitation of iOS. Why I can't update or download big apps on 3G? I just don't get it.
IMHO this is all unsound advice.

No sane system follows the "store the data in multiple places" design; you'd need to pull it all back together to validate the password anyway, and a breach is extremely likely to compromise a system that can do exactly that.

Similarly, creating a salt from a calculation rather than, say, taking 128 random bits, is not going to help, nor is depending on the secrecy of the source code ever a prudent choice. It will certainly produce less entropy than the latter, will not produce a different salt across password changes, and is just very, very hacky.
Do you get a different file than me? No-one but ia_archiver is allowed, see https://pastee.org/zpjsa
seems more like a article the virtues of Rays past predictions and is rather one sided. Ray Kurzweil, the man with the crystal ball
Official post: "Why we revert to original titles" https://news.ycombinator.com/item?id=6572466 (414 points, by pg, 127 days ago, 220 comments)

I agree that too much editorializing is bad, but textual titles are also bad. In the last weeks I feel that the rules had been relaxed a little, but I haven't done any systematic measurement.
News Aggregator on Cloud, AWS, Devops, Big Data
> Good enough to be used as personal workstations
> for what were the first DTP systems.

If you're referring to Star on the D-series, that was written in Mesa, which did not have GC.

Alto system software was written in BCPL, which did not have GC (or much else).

Bitsavers has a good deal of the documentation for these systems.
Hahahahahaha, thanks Paul!
I think it's obvious as well.

However, I run into all sorts of people who are convinced that DST actually gives them more hours of sunlight in a day (i.e. a 24 hour period). If I ask these people how that's possible about half proclaim "well you lose it from the winter when it's colder out" (!) while the other half just admit they have no idea.

Just like you wouldn't say "this laptop battery lasts longer than the other" if you started them at different times, I wouldn't say the "sunlight lasts longer" either.
Unit Test Survey Project (60 sec survey) - Measuring the unit test culture
I am not sure it is a good idea to use Fortune 500 companies as a signal for which technology to use. They are typically pretty slow to change.
Correlation does _suggest_ causation.
Actually, in this case I'd argue that a general/generic measure of "human scientific and technical advancement" is a decent underlying causal factor.

Maybe meaningful, if kind of obvious...
Walled gardens are great... until you run into the wall.
Ask HN: What Web framework do you recommend for a Java Shop?
That's why people make such a big deal about an elevator pitch.

If you can't express it as an elevator pitch, it's probably not a fully formed idea.
This is a terrible idea. DO NOT tell people to do this.

The right answer is in a sibling comment, Right-click, Open. That way you retain the decision of what's allowed to run.

It's not even an inconvenience, once you've run it, it won't ask again.
Should Obesity Be a ‘Disease’?
This just remind me of the slides from the NSA operation ORCHESTRA: Annual Status Report in FOSDEM, Brussels, this year - see video here: http://t.co/8WSSjOFrLk
A weekend is not a surface
Maybe a bit off-topic here, but I think there is a cause-effect relationship between number of transistors and life expectancy. More transistors implies more computing power. More computing power leads to better/faster information processing, including medical information. This leads to faster patient diagnostics, better treatments (pharmaceutical innovations), earlier and more precise health warnings (lab tests an medical equipment), and so on.

Faster and better information processing leads also to higher food quality (food processing plants), higher life quality (environmental temperature and humidity control), etc.

Germany is a highly industrialized country, so information processing power causes a big social impact.
> There are casual reasons to believe that the rate of progress will continue for some time.

What are those reasons? What if you extrapolated the speed of passenger planes in the 60s, or even 80s. Just 30 years ago. Would you be correct about the 21st century? How about space travel?

What if AI is just like that? We'll keep improving, and then it'll stall. It may later recover. Or not.

That's the problem with extrapolation, and extending current trends into the future. It's actually pretty reliable — you're often right. Until you're not.
Users blast LinkedIn for falsely implying that colleagues have accounts
taobao.com has the shortest robots.txt
http://www.taobao.com/robots.txt
Talk to People and Seek Understanding
I would like to suggest a modification to the author's thought about an ORM. What would be very cool would be a PG extension that wraps a mongodb compatible Api on top of postgresql.

That should completely short circuit the whole value proposition discussion of pg vs mongo.
I don't think there are many shared resources at Apple between the iOS and OSX teams, at least as would be doing OS updates to fix this.
Thats his schtick- publicly speculating on this is a big part of his fame.
> How is this graphs fault?

It's not. I'd love if more people understood this clearly, it's not "statistics" that are "misleading" - it's their authors that are lying.

You can lie when speaking, you can lie in writing, and in the same way you can lie with data or with data presentation. There's no fundamental difference. Either you do your best to tell the truth, or you do your best to mislead people.

I wish people treated, on the emotional level, being presented with a misleading graph in the same way as being lied in the face in person. It should have the same social cost. If I told you a blatant lie, you would never want to have anything to do with me in your life anymore. So please, in the same way, don't trust those journalists, companies, salesmen and others, who mislead people by using statistical graphics.
I would not go into lengths to call correlation an evidence. It can be taken as a clue for further investigation because it also does not deny causation.
Bitcoin could die just like Netscape
Technical Innovation vs. Social Innovation in Crypto-currencies
I don't know whether it would have been a good thing (really don't know).

It seems that GC's developed so far are basically inseparable from individual language implementations, or rather closely related families of languages, which have similar approaches to programming (e.g. rooted in single virtual dispatch on heap referenced objects). These systems require complete buy in to a particular approach to computing in order to be usable from new languages, forcing them to use the same object layouts, calling convention, stack usage conventions, unwinding support, view of concurrency, etc, which can all be very limiting. [Edit for clarity: the high performance GC and access to existing libraries is the honey, the forced view of computing is the resulting bee sting.]

I think if such a siloed GC VM system would have become dominant, we would not have such a huge set of reusable routines to call from really innovative new languages. That's something for which we can be grateful to C I think, despite all of its flaws.

So I think even the high performance VM's delivered by the JVM and CLR are too limiting, really. I'm a lot more excited by the prospect of LLVM making precise GC easier for language implementers. From what I understand, the API is being standardized now, so maybe in a few years we can start enjoying some common work on high performance GC's usable by a really wide variety of languages which don't all have the same narrow approach to computing.
and you are mistaking the finger for the moon
LyX works more reliable in my experience: http://lyx.org
Mtv Singer – The Waatcher – BitterSWEET E.P. PT. 1/2
That's my point. It's easy to advocate something when you have no intention of participating.

That's called American syndrome. "Yea! Let's all stand up to the gov!"...
* waits for someone else to do it first
To port my game I ported a game engine to android (Part I)
Slightly west of you in NY where it rises at 5:30a EDT/ 4:30a EST.

I find it much easier to wake up at 5:00a if sunrise was half an hour ago and the sun is well up in the sky. I can get up, go for a bike ride on the boardwalk, shower, enjoy breakfast by a window.

And with sunset at 8:30p EDT/7:30p EST ... well, if I'm outside in the evening, I'm usually hungry and want dinner by 7:30p, so the sunsetting then wouldn't bother me in the least.

The winter is most miserable when the sun rises after 7:00a, waking up in complete darkness is miserable for me.

If the vast majority doesn't like getting up to do things when the sun is up already because they'd rather sleep in bed so they'd rather have everyone change their clocks at great expense shrug I guess that's their prerogative.
I think he serves as an optimistic distraction as Google integrates itself into the military industrial complex.
How to wrap your mind around WhatsApp’s purchase price.
Good! just like a koan should
The magic of this technique is that mechanically and reliably takes impossible tasks and makes them actionable. All that's required, you tell yourself, is 20 freaking minutes. I can do that. Anyone can do that.

What I usually find is that after the first session, I'm engaged enough to keep going. My emotions have caught up, my determination sets in, and now the desire and confidence to complete the task are strong enough that I rarely need to do more pomodoro sessions.
Mozilla Says New Chip Paves Way for $25 Smartphone
> C++ vs Go

Bad example :P
> as Google integrates itself into the military industrial complex.

This is a very bold claim. Care to provide any reference/support for it?