skysight-inc/HackerNews huggingface dataset:
This is my exact setup. Haven't had any issues with it so far.
http://www.zx2c4.com/projects/password-store/

I started using it earlier today actually (moving from KeePassX and have been meaning to for a while) and so far I really like it. As an Emacs user the Emacs integration plugin is also pretty amazing and it has import functionality for most known password managers.
I also had to learn to code to get my startup off the ground; it took a while and was painful, no doubt about that. Eventually I realized that coding is a process that I could enjoy if I let myself. Same with all the other things I do day to day.

But 8 weeks? That's it? You have a long way to go. It took me about that long to get to where I was good enough to create a basic app on my own. Building a business on top of your coding abilities takes much longer, so try to focus on what you have accomplished. It will always (ALWAYS) take longer than you'd think to get where you'd want to be, so just repeat what everyone else in this thread has been saying: it's a marathon, not a sprint.
Comcast has no incentive to ensure its routes to various Internet transit providers are GOOD if they're not monetizing them.

Customers pay Comcast with money to establish those links. If that's not "monetizing", what on earth is?
I have a gpg encrypted file with them in just in case, but mostly I know them from memory, or rather I'm able to find them back.

I have a few "roots" passwords which depends on the necessary level of security and the importance of the service. Them I know by heart. Then for each service I add a few characters (letters, numbers, punctuation signs) which depends on the service and feel natural as prefix and/or suffix (sometimes it's a bit more complex if it can be fun).

For instance lets say a root is "icanh4zcheeZbugr", then maybe my reddit password will be "reddicanh4zcheeZbugr,t".

It works pretty well in practice. More than one time I was sure to have forgotten a password and was actually able to rediscover it quickly.
I have a gpg encrypted file on a server that I manage manually - made slightly easier by the gpg plugin for vim. Not found a password manager with a UI that I get on with yet.
I memorize my email passwords (just 2-3) and put the rest in KeePass with backups online. Worst case scenario I have to request a forgotten password via email.
Show HN: Plasso – Payments Made Simple
It appears to use the :visited pseudo-class. You'll notice if you click that area it'll link to the page.
when i was very young - 20 years old - i was a part of similar situation once. I hope i learned form my mistakes :) The main lesson is that you're just an employee with 6% of [easily claw-back-able] shares, nothing more. Whereis you sound like you felt like you were something more than that. You didn't even had the power to initiate audit check of paperwork and financial info - minimum power of a "minor" stakeholder.

And this even without getting into having CEO girlfriend in the mix. Man, the time-proven standard practice to not have GF/relatives/etc... in the chain of command of their BF/relative/etc.. exists for the reason.
1Password for OS/X and iOS (iPhone and iPad). Backup passwords for GMail and Dropbox are printed and stored in a safe place in my home, in case two-factor authentication doesn't work (e.g. iPhone stolen).
LastPass. Strikes me as just insane to use anything else.
[hrr, can't edit my own message anymore, it seems]

errata: mpOTR (as implemented by cryptocat) does not seem to support PFS right now, which is quite a big deal.
Climate change is clear and present danger, says landmark US report
Note that all plans are in addition to Stripe's 2.9% and 30 cents per transaction.

The big 0% under the platinum plan header implies that you will not pay credit card fees.

In fact, you will be paying $139/month plus 2.9% and 30 cents per transaction.
I have to say - I have been unfailingly impressed by Lastpass. For $12 a year they provide a lot of value add, and seem (at least to someone who knows shamefully little about the nuts and bolts of security) to be fairly transparent about what using their service means for Users.
It's really hard for a young startup to turn down big potential customers, so offering the first taste for free is reasonable, but it's equally important to then quickly discontinue the free trial and leave that customer wanting more.
As a paying customer I do expect support and that includes at least a brief explanation as to what is happening with the product in the longer term. A tweet. A simple one line update on the website. A forum post. Any of those would be fine even if, like you said, it is just to say "I am burnt out, I am taking 2014 off". I am disappointed that if he has returned to work on the project that we just get a silent new dev build without any kind of information about the future.
I've personally been enjoying Dashlane. It has quirks, weird behaviors, and occasional sync issues, but it's been light-years ahead of LastPass for me. Don't know about Keepass.
I use this trick to generate (in my head) a unique password for each site: http://blog.rabidgremlin.com/2009/12/28/tip-creating-easy-to...
Firefox's password manager for web stuff, system keyring (whatever comes with Ubuntu) for passwords to GPG and SSH keys, and pass[1] for everything else.

[1] http://www.zx2c4.com/projects/password-store/
gj implying on twitter that your followers should upvote your comments lol https://i.imgur.com/FI6IdaO.png
Randomly generated passwords, encrypted file. "Open source password manager" is the closest match, though it's not a specific solution.

Sharing between full keyboard/desktop systems isn't so tough, but transferring 30 character passwords to mobile devices very nearly exactly sucks.

Answering a now-deleted comment: "Using a tool would defeat the purpose of a password for me (a key hidden where we still can't read - the brain)."

The purpose of authentication isn't to provide absolute proof against compromise. It's to provide an asymmetrically difficult means for you vs. someone else to access systems. There are hacks against memorized passwords just as there are against encrypted safes of passwords. The question is: which makes you most secure?
Nobody mentions how much or little the PHP community thrives. People point out how bad PHP compares against other languages. The fact that you enjoy using PHP and that you can create great products with it does not imply that it has no flaws.

Many have been where you are now, and then moved on to other languages to never ever look back. From what I've seen, the reverse is much less common.
This is a comment that appears to endorse mpOTR's broken transcript consistency feature. Also: formal security proofs? Really?

Some context: http://tobtu.com/decryptocat.php

(Yes, we know you addressed these issues; the page I just linked to says that).
So why pay extra for a Stripe wrapper?
Maintaining Privacy: Using S3 as a personal screenshot sharing service [osx]
What's insecure about having a good password in memory?
> London is great but expensive

There's a great startup community here in London and I reckon that plenty of people will be willing to help make things a little bit cheaper by letting SUS attendees crash on their sofa.

I've dropped Sam an email to see if YC's interested.
Acquia Halts Non-competes for Employees
I can guarantee their TAM is >$108M / yr.

I am involved in two websites that get a lot more than 10k visitors / month. Neither are listed in Quantcast. Using (crummy) traffic estimates based on Alexa ranks, I'd wager that there are at least 600,000 websites that would qualify for your >10k monthly visitors mark.

But I suppose it's all a moot point: They convinced at least one VC to invest, and that's all that matters. (Having used their product in the past, I probably would've invested too given the opportunity. Their product is pretty slick and saves a lot of time compared building your own A/B testing framework.)
You have a lot of thoughts about how this could have been done better. Have you passed any of these along to Professor Duffy?
That is incredibly annoying, because it will probably have the effect of setting off the ring detector and burying the story, which is too bad, because the TextSecure post we're talking about here is excellent. I'll let the mods know. Thanks for catching this.
I'm reminded of ICU64 - an interactive debugger for C64 - as seen in this 2009 video:

http://www.youtube.com/watch?v=tjcvR5McmSg
This is no different than if excess contributions were invested in any financial asset.

Let's pretend that instead of buying Treasurys, excess contributions were invested in Verizon bonds or Alabama municipal bonds or shares of Facebook. Those assets would have to be sold years later when payments to beneficiaries exceed contributions.

> what happens to the cash that the trust fund gives to the Treasury

If the trust fund gave cash to Verizon in exchange for its bonds, Verizon would spend it to build networks and cell towers. If instead you go with the Alabama Port Authority, they'll spend the cash on the port. Give cash to Peter Thiel to buy his Facebook shares and he'll spend it building an offshore libertarian paradise.

So what?

Pension funds don't collect warehouses of cash, they invest in income-producing assets. Why does it matter if those assets are issued by Verizon, Alabama, Facebook or the Treasury?
IMO the best way for YC to do something to start with in Germany would be to get involved in CCC/31c3. (CCC is a weird combination of IEEE/ACM and hackerspaces, and huge in Germany)

A "how to turn your project into a company? should you, and why?" talk by YC (ideally, with European YC company founders, ideally in the product spaces most interesting to CCC hackers) would be awesome. The downside is it's 27-30 DEC in Hamburg.
I use RndPhrase (https://github.com/brinchj/RndPhrase). It's a plugin to your browser that lets you enter your own password on each site, and replaces it with secure per-domain passwords. It also has a nice web interface at http://rndphrase.appspot.com/, so you can use it even if you're not on your own computer.
Pelican, a Python site generator: Creating a Svbtle themed blog
Custom d3 template clone
It's completely crazy and just blatant extortion on Comcast's part.

The current system is pretty straight forward.

Level 3:
Server(Who Level 3 Charges) -> Level 3 -> Comcast -> End User

Comcast:
End User(Who Comcast Charges) -> Comcast -> Level 3 -> Server

Now Comcast wants to charge everyone in the chain that isn't them. They are attempting to do this by degrading (or at the very least not upgrading) their services for their customer.

The techno-libertarians that try to defend this nonsense are going to sink the whole ship and make every pay to receive even less.
There should be an option for PwdHash!
Lessons Learned from Creating a Reliable Mobile Build
I think showing only tabs[0] with the fixed header would be better? I'm not sure which part of the header is used more often though. You guys must keep some stats on the usage patterns.

And one more suggestion about this: When I click on the up arrow, focusing on the search bar would be nice. But that may be just me.

[0] Like this: http://cl.ly/VMql
jesus christ fuck already
Washington state sues Kickstarter campaign
What's the sample rate on that?

(how many times per second is the same point revisited)
> this will spur a bunch of additional attention which will cause the student's changes to be refactored into something that the previous editors would find acceptable, and much of the student's research will be incorporated into the page.

So, maybe the blog post isn't such a bad thing after all?
Executives still have to live by their non-competes, which seems to be the bigger competition threat.
It really seems like you wrote this comment not to add anything to the conversation, but simply to discourage me from commenting. I really don't understand. I'm trying to be constructive here and I wish you'd join me. Your comment right now just flails around for abrasive things to put together into a statement that is completely incoherent and off-topic.
That's a good idea jgeorge. Do you have any idea as to what kind of metrics we would have to collect about songs to generate this kind of data?
I do the exact same, but with the added step of adding the backup passwords for Google/Dropbox to the extra text fields you can add in 1Password. (For the very rare case of "I lost my phone/ipad, am not home for the physical backup codes, but still have access to 1Password on my Macbook")
OP here - I wanted to thank y'all for the great advice so far, and I wanted to share one thing that has helped me a lot: founder's breakfasts.

We get together once every two weeks and hold one another accountable. I bring donuts. Everyone shares a good thing and a bad thing that happened, explains what they accomplished and failed to accomplish, and commits to what they'll complete next time.

One thing: it helps to make sure everyone in the room is at a similar stage, or at very least working on product-focused startups (or all ecommerce, or whatever). That way there's a lot more value in hearing what other folks are going through.
Should Your SaaS Company Sell To SMB?
How many passwords do you memorize?

Do you use any of these at more than one site?
Ask HN: Suspicious SMS sent to my phone on my birthday
from some random # i don't know to my phone: "Happy Birthday! Sorry I'm not there to enjoy it with you, but we can grab a drink and some other fun goodies when I return"

must be spammers, knew my birthday was today, and are trying to trick me into replying?
MSO revenue is threatened by alternate entertainment content, and is terrified of becoming a dumb pipe with no add-on fees. The issue is that Comcast wants to both connect to the internet for free & get paid by both the viewer and the content provider as they are in yesterday's cable model.

Comcast is connected to the internet through 'settlement-free' peering. Comcast can command this because they have grown large enough to trade access to their customer base for access to the transport network's data. Comcast would like to sell direct access to their network to the content providers, but would like to see more money for the service that the content providers are willing to pay.

Comcast has allowed (through inaction of normal peering upgrades) the interconnections to Level-3/Cogent to become saturated. The primary data on those interconnections is data that competes with the normal content that Comcast is used to delivering to their customers. Cogent and Level-3 offer less expensive bandwidth than their competitors. This is because of their lack of incumbent telephony models, and being dedicated fiber bit pushers.

Comcast is claiming that it is too expensive for them to deliver the service levels to their customers that their customers have contracted. Comcast is demanding that the companies providing the data (not the transit network delivering the data) must pay to have their traffic delivered the last mile. Simultaneously to crying that their internal networks are saturated and require upgrade, the MSOs are offering products that allow their customers to use the local provider's network (for locally sourced content) without incurring billing penalties or usage caps.

(veteran employee of a transit network involved)
I have a base password that I use on every website.

Then for every website, I (for example) use the first letter of the domain name and the last letter, add it to the beginning of my password. Then I take the last letter of the domain name and add it to the end of my password.

This way I only have to remember my tiny algorithm + my base password.
He means it's ballsy because any one of us could just start cutting their physical lines.
Of course, back then, in the 1980's, there was no publically available internet.

Knowledge of minus world was spread purely through word of mouth. We used our meat based networking protocols.

What barbaric times those were.
So you don't have to do anything yourself? I personally don't want to set up a https certificate every time I want to take a payment.
I enjoy seeing those MRTG/RRDtool graphs everywhere. I find it so surreal that $X Billions in infrastructure, that is forwarding $Y Billion of internet traffic. All monitored by a single tool created by one guy from Switzerland.

Since this is HN: yes I realize that there has been substantial work subsequently, and that cacti/munin/nagios etc.. are more commonly used.
For how long? The blockchain is growing at something like 2GB per month - and getting faster.
Best service providers for renting dedicated servers (not VMs)?
I am looking for a new service providers who can rent physical servers (high end cpu intensive config) and manage them for us and wonder what are the options out there.

I see that rackspace have them, but I have recently heard that their service is degrading.
Shameless plug for my iOS app PasswordGrid, that create an easily printable grid for random passwords:

https://itunes.apple.com/app/id359807331
Could just be your hosting. For example, with Media Temple (years ago) I found it often took 7+ seconds just to redirect www to non-www, up to 12 seconds. Pingdom is a good tool to see where you're getting stuck http://tools.pingdom.com/fpt/ Another common problem, your MySQL database could be overloaded (especially with shared hosting) and more caching won't necessarily solve the problem.
About a year ago I was ready to jump ship on PHP. Then someone introduced me to Composer, Symfony 2 and Doctrine 2. I fell in love with PHP again, not because of the language but because of the tools. Its now clear to me that the language doesn't really matter that much, it's the tooling around the language that makes the difference.
Well you can't really assume people have anything setup properly, so i can understand why they're doing it.
Your inability to respond to my actual comments appears almost willful. Let's break this down:

* You complained about TextSecure's "lack" of transcript integrity.

* I pointed out that transcript integrity was a prominent feature of the blog post we're talking about, and a feature that the actual TextSecure protocol does vastly better than mpOTR.

* Someone else objected to allusions to TextSecure's transcript consistency feature as vaporware, given that Cryptocat actually has a UI for this.

* I pointed out that the protocol Cryptocat builds that UI on is so bad that you conceded downthread that you're building a new protocol --- you made that concession in direct response to my point about mpOTR's inferior transcript consistency.

* Your response is to imply that improved transcript consistency is not a significant reason for abandoning your existing protocol.

* I point out the inconsistency.

* You object that I'm not "adding anything to the conversation".
I saw a talk about IPython notebook the other day. How do you guys view it? As an IDE with an output format? Or a web browser with interactive interpreter?

It seemed sort of cool, but I am not quite sure where to place it. The guy doing the talk didn't sound very experienced, and I think the majority of his plus points for using it I get from an IDE. I would do the same thing using a full blown web app, but that would take a lot longer.

Curious how others view it.
3 Types of freelance clients and what they have to offer your business
I find it a bit weird that the OP only mentioned 1password and omitted lastpass which has been cross platform for longer and is free for basic use.
They happened to have a bit on Shakespeare's word invention: http://www.ttbook.org/book/shakespeares-inflence-stephen-mar...

Claim is that some 1700 or so of his 30,000 word vocabulary was invented by him. Including terms such as "assasination" and "gnarled".
>"In traditional wheelchair designs up to 30 percent of expended energy is lost because they lack suspension."

>It sounds an awful lot like bullshit.

It's not necessarily bullshit and in fact could be quite true. This is one reason why cars drive on air inflated rubber tires instead of solid metal ones. It's also one reason why trains are more efficient than cars, they have a VERY smooth "road" to travel on and thus don't lose any energy to up-and-down movement.

If you believe that suspension losses are trivial then I invite you to find a road with rumble strips (to wake up sleepy drivers who slowly veer off the road) and to ride it on a road bike with skinny tires at a very high pressure. Then ride it again with a non-suspended (or locked out) mountain bike with it's much larger tires. Then ride it again with a mountain bike with a suspension.

Here is an informal study doing precisely that for different sizes of road bike tires: http://janheine.wordpress.com/2012/08/12/suspension-losses/

You'll find that the pedaling losses from a suspension might get swamped by the benefits. So it turns out that the optimal solution is relative. Furthermore a person in a wheelchair isn't going to have the same kind of 60-120 RPM cadence (1-2Hz, but then double it since there are two legs, so 2-4Hz) that a cyclist would. You can do a lot of higher frequency bump reduction for wheelchairs and not sap the users energy for the wheel-push stroke which takes multiple seconds.

What this really has to do with is the size of the surface texture relative to the size of the wheels and the ability of the tire to deform. A lot of wheel-chairing happens on sidewalks which are fairly smooth but have expansion joints every 3-10 feet. Or on blacktop which is smooth relative to a car's tires which are air inflated but not relative to a wheelchair's which are solid rubber. Or what about older concrete, or tile, or one of any of the other myriad surfaces which aren't perfectly flat?

> Even if the article's claims of somehow increasing efficiency by adding suspension were true, I'll be they'd be more than negated by the added weight on the wheels.

It all depends on the kind of riding you do. I ride long distances on the road for training (not racing) so I don't have need of a wheel that has low rotational inertia. As such I could accept a weight penalty for the sake of comfort. I own a titanium road frame which is "heavy" by road standards and I put a tandem fork on it for extra strength, and I ride 40 spoke wheels. The idea that weight is paramount bar none might be true for professional cyclists but not for everyone. To a great many people it's only a small factor when making decisions.

EDIT: formatting and moving the link
using eWallet and after I got it down works very well for me.
I do something very similar to this, base password which is some digits and then some key word that comes to mind based on the website. For example I might use 123456cashmoney for my bank and 123456friends for facebook. Usually I use the first thing that comes to mind when I see the domain as I am very likely to think that same thing a year down the road when I am trying to remember that password! I've had a high success rate with this, rarely reset passwords for websites I dont access but once a year (ie turbotax)
If you're interested in doing this yourself, you don't need a separate hex editor; FCEUX has one built in:

http://www.fceux.com/web/home.html

Hex value watching and editing is a valued tool in the time attack community. If you advance frame by frame and watch certain values, you can see patterns showing when an enemy will attack, an item will drop, etc. Time attackers use it to minimize the time spent waiting for enemies, or finding which character actions affect level or enemy patterns.

http://tasvideos.org/Glossary.html#HexEdit

http://tasvideos.org/InputFileEditing.html
I thoroughly enjoyed the material in the presentation. What else matters?