skysight-inc/HackerNews huggingface dataset:
IIRC that site is hosted on a Raspberry Pi running SBCL and CL-HTTP, if it could handle HN traffic it would be just magical.

Since the website is not up I decided to fish for a video showing Open Genera stuff elsewhere to share with you fine folk: https://www.youtube.com/watch?v=o4-YnLpLgtk

Unfortunately there is no easy way for we to play with open genera since its proprietary and expensive. The world would be a better place if this type of system popped up more often.

For those interested in Lisp I recommend the book "Land of Lisp" http://landoflisp.com/ or if you're more like a Racketeer then "Realm of Racket" http://realmofracket.com/
Wow, I guess this is what would have happened online during World War II if it happened in modern times. Interesting historic landmark as far as information dissemination during confrontations/wars.
Sorry if this is n00bish, but I may not understand what SuperTrip is. The site mostly describes what SuperTrip isn't and when describing what it is, I'm just seeing lots of non-specifics.

I tried to watch the video to understand, but again, I'm not sure I get it.

I looked for a summary, but the only concrete information is "The goal of the game is to reach all the destinations."

It seems like a treasure map via AR...is that right?
I trust everyone until they give me a reason not to, that is my philosophy and my fault for assuming everyone else's.
Number one is being careful about NEVER triggering a repaint while an animation is happening. That means only animating css transform properties and opacity, and deferring anything that updates the contents of an element until after an animation is finished.

Number two is that, even though it's running a physics simulation for each animation, we kept the physics code really simple. The simulation code generally takes less time than the drawing itself.

It also doesn't rely on jquery animate, which has a lot of extra cruft to run on older browsers and support legacy code. Writing the rendering in pure javascript helps a ton.

And I think the last thing is that, when the animations respond with the velocity of your interaction it makes everything feel really smooth.

Even if an animation runs at 60fps, if the way it responds to your touch feels bad, the animation won't look good.
Here's the published paper in full: http://rsif.royalsocietypublishing.org/content/11/100/201407...
Thank you for posting this. +1
This is a really cool use of technology with a real world application.
Nothing in that thread annoyed me as much as this comment does. Yes, BLAKE2 is trendy, and name-dropping is tempting. But BLAKE2 is also not a password hash, and can't safely be used to store authenticators for passwords.
It'd be really interesting to go back and see when people started to shift towards colleges being a training ground and not the typical apprenticeship path that was the real training for generations. The way you learned to be an electrician was by being someone's apprentice, then working your way up the ranks, and this went for nearly all trade industries that I can think of. This statement has come to sound incredibly pompous (and I genuinely don't mean for it to), but college isn't for everyone, and it shouldn't be the only road to a successful life and career.
You raise some good points, but the issue with MD5 are largely down to speed.

MD5 is fast - and while computational speed is normally your friend, with cryptography it's your worst enemy. Simply put, the faster the cipher, the more break in attempts a cracker can have per second.

This is why password strengths are often represented in duration (ie how many years would it take to crack). Though those figures are hugely estimated - to the point of being practically worthless.
Microsoft's new OneDrive feature is Android-first
I'm pretty sure a couple of the posts here are tongue-in-cheek, but most of them reek of cluelessness and tl;dr
If a startup won't talk about equity percentages then they aren't offering you anything. Do not accept that offer. That said, as an employee (especially a junior one) you will not be getting a very high percentage of the company as part of your option grant (think 0.25%) and it will be vested over the course of 4 years.
A good project manager is a very good thing. Of course you also need a defined project for a good project manager to shine.

Also, I hate being put on a project that is poorly defined and I end up having to do the project management stuff. It's not my job, not my strength and not what I was hired to do.
All of those people need to take down any information they have on their company/personal sites about their customers. Mass pwnge is incoming.
"Big company" and "startup" are not homogenous categories. I've worked for Big Companies that are slow and plodding and I've worked for startups that are as nimble and quick as lightning. But I've also worked for extremely nimble Big Companies and startups that couldn't make anything happen and were mired in a giant pile of technical debt and process.
Crony capitalism, corporatism... Call it whatever you want, but it doesn't really exist outside the framework of capitalism. I'll keep looking for the true scotsman just in case I'm wrong, though.
Because running the cordova commands is so hard.
Very impressive and smooth transitions. Will definitely give this more attention. Thanks for sharing.
But then "do not use MD5" is still a cluelessly strong statement.

It should be: "do not use any un-iterated message digest function for passwords: password hashing functions iterate a basic hash through numerous rounds, perhaps thousands; and some even encode the number of rounds as part of the salt, so the rounds can be increased in the future without changing the function, so it still recognizes old passwords."
"To find real work, I had to teach myself new technologies and skills outside of class, and it wasn’t easy."

What the hell was this guy expecting? "Hey, guys! I just graduated! Let the money river flow!"?
Creating MVP for http://molo.io. Trying to launch in Fall/Winter.
I was under the impression SHA256 is valid...it's a cryptographic hash function that hasn't had weaknesses identified yet. 40 iterations of that + salting would suffice, no?
How to capture, compress, and send images (JS)
I didn't know that either - thanks for sharing.
I do realize bcrypt is arguably the best option, but why is SHA not valid also?
Would be great to see an addon like this for OpenShift, too. Even though the ssl cert. setup there is quite simple, one still have to be careful.
I've never been a good at Templates. After reading this it seems that a lot of Template uses can be replaced with the generic lambdas using auto as the types going in.

Am I wrong or misunderstanding? I'm not saying completely but I feel like when I have used Templates I can now use this.
It's linkedin. As expected.
go flip burgers
To expand upon that...

The problem with md5 and sha and such is that they are fast. bcrypt is useful because it takes a fixed amount of complexity which can be specified by the programmer (and later increased). It also uses salts to thwart rainbow tables. The complexity bit is important, though, because as computers get better, you can make it harder to reverse your passwords.

Also, the biggest reason any of this is a problem is because password reuse is rampant. You are being entrusted with the password to your user's life - their email, their bank account, their facebook account... treat it with respect.
This summary created more questions than it eliminated.

Nobody has explained this better than Coda Hale:

http://codahale.com/how-to-safely-store-a-password/

(in place of "bcrypt", you can substitute "PBKDF2" [weaker] or "scrypt" [stronger], but all those options are just fine).
the SHA algorithms were designed to digest data as fast as possible -- which things like bcrypt purposefully slow it down plus can perform multiple iterations with the output of one iteration feeding as the input to another.

Here is some more info: http://forums.udacity.com/questions/6016855/hashing-password...
"Occupied Crimea" is a bit debatable isn't it? (seeing as the citizens voted for and celebrated joining with Russia)
If you're going to use SHA256 for hashing, why not use it in PBKDF2-SHA256?

https://defuse.ca/php-pbkdf2.htm
Working long hours goes with the kind of person you are. 80 hour work weeks may be productive for some people whilst others perform better with 37 hour work weeks (or less). We are all different.

Something to keep in mind for this, is that people tend to be fairly lousy at detecting how what they do affects their productivity. Even if you think you do well with long weeks (or multitasking, or whatever), you can't know that without keeping a log of how much you actually got done under which conditions.
In aggregate I'd say that's true. They just collect everything for everybody.

Still it's trivial to have algorithms to identify the race of the people they have data (heck, even just "call metadata" for). To give an obvious (if slightly non-PC example, if you're from a specific part of Baltimore and you're called Jermaine, you're in all probability Black). And Jesus Mandolito in Southern California is probably latino. And of course they can cross-corellate with databases, like social security info, police records, birth certificates, and the like.

Plus, not every population / race is targeted equally. Consider Middle-easterns vs Icelandish people for example. And not everyone is them is an equal target for later data use.
Looks like propaganda.

Didn't Ukrainian president Poroshenko say he had hard evidence that the rebels and Russia shot down fligth MH17? Where is it? All gone a bit quiet hasn't it? Every few days he makes new claims but never backs them up with evidence.

Any Russian programmers want to comment? How does it feel for Russia to be constantly demonized? Even here on HackerNews, when was the last time there was any positive story involving Russia and technology? Maybe it was Tetris.

Yesterday Gazprom announced they are selling oil in Rubles and Yuan, no USD involved in the transaction, a story that might not make HackerNews but worthy of reporting in mainstream news, yet the headlines were that Russian hackers had targeted JP Morgan, and a few days before it was Chinese hackers.

Plus ca change, plus c'est la même chose.
relevant: https://twitter.com/RealTimeWWII "@RealTimeWWII is a Twitter feed describing the events of World War II, created by British historian and Oxford grad Alwyn Collinson(...)."
Agreed. I think a better solution to the article author's problem would be to treat 'programming' education (which is not the same thing as computer science) like a skilled trade like carpentry or plumbing, and intersperse community college courses with a formalized apprenticeship program ... it might take a while to get some traction, but it seems like it would work as a way to train programmers while not gutting our ability to do blue-sky theoretical research in computer science.
I bounce back and forth between startups (5), small companies (2) and mega corps (3) and so might some unique perspectives.

The truth is that for most of the world, bigco's are the default and startups have to sell their employment in order to get employees. They have to find some way to offset the inherent employment instability that working for a startup entails. This has created many of the myths in this article that continue to be perpetuated.

Some observations:

Like a few other comments, I've noticed that the absolute best-of-the-best work for "real companies" and not startups. The reason working for a bigco doesn't get the reputation of having the best engineering talent is simple, talent is like any other thing with a group of people, it follows a pyramid distribution. Most of the people are terrible and at the bottom of the pyramid, and as you move up the pyramid you end up with smaller and smaller populations of very good people. Except you can't have fractions of a person, so in bigco, where the projects might involve 100 engineers. That top-notch engineer accounts for only 1% of the staff. Sure maybe 80% of the staff may not be any good, but that still leaves you with 20% who are at least decent work-a-day engineers.

In a startup, your entire engineering staff might be 10 people, and your top-notch engineer now accounts for 10% of all the staff time spent on a project. It's almost like having 10 top engineers instead (if you try to scale the numbers to match). It's easier to find 3-4 above average folks to round out the top of the pyramid and the rest are just there to fill in the mortar and won't last long.

This means that your individual contribution is magnified in a startup. Everything is magnified in a startup. Decision making power, individual contribution, etc. But so are negative aspects of working in a company. When things go bad, they go bad really fast in a startup. The worst political dramas I've ever seen were all in startups. Points of failure are enormous in small startups.

One of the thing that happens as companies mature and grow is they learn they can no longer tolerate so much magnified failure, so they build in controls to spread around responsibility so they can better survive what would be a catastrophic failure in a startup (founder leaving, tech decision turns out to be wrong 18 months in etc.).

The side effect is of course that in order to turn down this magnified negativity, the magnified good stuff also gets squashed.
Because it has no work factor. It's uniformly fast, which makes it very easy to brute force. The general-purpose strong cryptographic hashes --- your SHA2s, SHA3s, and BLAKE2s --- are all amenable to fast implementation on GPU.

What you need is a password hash, not merely a cryptographic hash.
The American Time Use Survey only measures "paid work" which I assume excludes personal projects and most "night owl" activity other than being in operations/on call or having a particularly bad job.
> That doesn't seem directly relevant to password hashing. Nobody wants to find some 596 character string which has the same MD5 hash as your 17 character password, even if it does work in its place.

A SQL injection vulnerability lets you get the MD5 hashed passwords out of a database. As most people don't use 17 character passwords, you can check the MD5 hashes against a rainbow table (you can even do it online) and probably find a privileged user account pretty quick.

I actually broke into a legacy system my predecessor programmed in this manner when I couldn't find documented admin credentials.
Become very familiar with your browser of choice's Developer Tools. In most of them you can set breakpoints in your JS, add watches to your code, among many other useful debugging techniques.

Also, two monitors will make your life 1000x easier.
I'm a bit confused. This article says SHA-256 is a general purpose hash algorithm, but wikipedia says it's a cryptographic hash function. Is the wiki article wrong?
I think it has to do with the whole 'explicitly focuses on renting out 2nd homes' deal. To me, it makes more sense to allow people to rent out properties that they own rather than units that they themselves are renting. I'm fine with someone renting their summer cottage on a lake in Vermont - less fine with someone explicitly renting scarce property in SF for the sole purpose of flipping on Airbnb.
Ask HN: What are some Bay Area startups that don't use an open office plan?
Are there any that use cubicles or more private work spaces?
Promising idea. I like it. Does this work with any city, or is it just select cities?
We[1] have previously given a candidate a (small) work sample test to solve, and allowed them to use either their own system or one of ours to solve it. We don't watch them while they attempt the solution and we allow them full access to the internet. It seems to be revealing enough as to their competence.

1. http://ldrinteractive.com/
Comments on the referenced twitter "sources" are hilarious. Shows just how sarcastic people are of any propaganda these days.
I'm not familiar with Jinja caching but I think it only caches the number of templates you got, so it grows to a fixed size.
Reminds me of the spy novels that led the British to create MI5.

http://graemeshimmin.com/william-le-queux-and-british-spying...
Author claims to have studied engineering, but seems to be absolutely unaware of co-op programs which almost all engineering schools have. Some, like Northeastern University, even require you to do a co-op[1]. I've worked with Northeastern students at pharma companies and they dive into the belly of the beast when they they spend six months at a company. Often, they become so integral, they get hired after they graduate to keep doing what they did during their co-op.

Or an alternative model, going back to 1916, is MIT's Practice school[2], where graduate students go into factories and apply their training on specific projects.

This reads largely like someone who is ignorant of the opportunities that were probably present at Penn State, assuming that a degree would just get him a job.

[1] http://www.northeastern.edu/coop/
[2] http://web.mit.edu/cheme/academics/practice/
MD5 is vulnerable to collision and preimage attacks, which is bad for your password hashes, period. Other functions provide additional computational difficulty in doing exhaustive search of the keyspace. Even more functions prevent hardware implementations from speeding up the process by requiring excessive amounts of memory. This is why everyone suggests using bcrypt or scrypt, or if they're not available, PBKDF2.
Show HN: HackerTyper Sublime Plugin
How do you know how simple it is for a CSR to offer you a refund?

I don't. So I asked the CSR to please pass my request on to someone higher up.

The response?

Nothing.

Zilch.

Not even the decency to tell me, "No."

I gather then that once Dropbox decides you're not a potential revenue source they can't be bother with even basic consideration.
I went to a good school for computing science and I know I graduated with a few people who couldn't program. They had no intention of programming in their career which is good because in 4th year they were producing awful spaghetti code.
There are certain cultural imperatives; catchphrases that get repeated. Like Facebook's "move fast and break things." That's an interesting statement in and of itself, but what's more interesting is watching how people interpret that imperative and get things done.

Don't want to go into too many examples, but let's take the "we maintain an incredibly high hiring bar, because good people want to work with good people." Everyone says that; how do you actually execute on that in practice? What interview practices work? One well-known public thing you can see from reading Glassdoor interviews is that the founders try to interview every candidate. One of the most memorable things about my time there is that even the guy who was hired to stock the kitchen went through an intense interview process; which seems like overkill until you meet him and realize the depth of pride, customer service and creativity he brings to his job is every bit as strong as the engineers we hire. Not everyone who says "we maintain a high hiring bar" would go through that kind of effort.

(P.S. re: the above "lifelong friends" comment as well - that guy, who I am still friends with, continues to post photos of particularly well-executed Palantir meals to private social media. So while I respect the feeling that 'it sounds like the military' -- like the military, I'd say it's hard work in the short term, occasionally nonsensical, but for people who are willing to do it it's very much a long-term positive experience.)
I studied English and not engineering and had no problem finding a job in NYC as a programmer.
It's a cryptographic hash function for general cryptographic usage (e.g. HMAC), but it's not a password hash function.
Apart from the problems of holding referendums while occupied, the referendum itself was not legal under neither Ukrainian nor Crimean law [1].

[1] http://en.wikipedia.org/wiki/Crimean_status_referendum,_2014...
I'm not sure how long you've been around, but if you remember the way that OOP was implemented in version 3, you'll realize they've been coming around for a while now.
Because a lot of passwords aren't particularly strong, and thus are feasibly crackable when you use something like SHA-256. You can test millions or billions of candidates per second on commodity hardware, and you'll be able to recover a lot of passwords.

The purpose of systems like PBKDF2, bcrypt, scrypt, etc. is to intentionally slow the whole thing down so that it takes on the order of one second to test a candidate. This is a minor burden for normal use, since you don't check passwords very often, but it makes it vastly harder for an attacker to crack a password.

Edit: just to put some numbers on this, it looks like high-end GPUs can brute-force about 2 billion SHA-256 hashes per second. That means that an eight-character alphanumeric password could be recovered from a SHA-256 hash in less than a day, on average. Add 20 non-alphanumeric symbols to your character set and you're still only looking at about six days. Eight alpha+num+symbol characters isn't a terribly great password anymore but it still shouldn't be recoverable if your password database leaks.
I think you're confused about what "playing the victim" means. When a man says he had to hit his wife because she wouldn't stop nagging him, that's playing the victim. When a woman contacts the police after receiving death threats, that's responding to a threat appropriately.
Show HN: GiFmojo – Punch your camera roll in the face
Then it cannot cause a compile error in standard C.
I've mentioned this before on HN, but I was at a start-up where we lost candidates because, in the candidates' words, the other company was giving 200,000 options, and we were only giving 500 options.[1] 200,000 would have been the entire company. [2]

I can totally believe that the CEO is giving the raw number because that's what the labor market has trained him to give.

[1] It's possible they were lying because they thought working for us would suck. It's not true that we were better off without these people because they didn't know basic economics and accounting. Lots of very good people don't have a clue how that stuff works.

[2] If I ever found another start-up I am going to go hog-wild and make quintillions of shares just as social commentary.
If they were easily verifiable you'd have gone back to the threads in the Snowden era rather then played pedant with what you can dig up on the first couple of pages of my comment history.

It isn't and you know it.

EDIT: And that search engine definitely isn't fully indexed. But a search for me and points<0 gives nothing but NSA threads. <1 less so, but it's still a sizable portion.

EDIT 2: Though to spin this around for a moment, that is handy utility - thanks!
Legal or not they do seem to represent the will of the people, http://www.aljazeera.com/news/europe/2014/03/crimea-celebrat...
If you're interested in a more open system that can be used as a VPN,
I recommend cjdns: https://github.com/cjdelisle/cjdns

It was a breeze to set up.
I've been using it as a VPN to connect all my boxes and ssh to my machines that are behind NAT, and it's been very reliable.
And, if I want, I can connect my boxes to the big cjdns mesh network "Hyperboria" and do my part for promoting a decentralized internet.
Free on AMZN: Where Startup Ideas Come From: 4 Ways to Get Business Ideas
A weekend side project to build a Home Automation API
So how do they pay you? Rubles?