skysight-inc/HackerNews huggingface dataset:
User table has two columns: userid; salt.

Password table has one column: hash(userid+password+salt).

Login process: given userid and password, look up salt. Check if hash(userid+password+salt) appears in Password table.

Password reset process: Given a userid and new password, change salt to a new random value and save to User table. Insert hash(userid+new_password+new_salt) into Password table. The old hash remains in the Password table and could still be used to log in, but in theory is useless because the salt has been destroyed.

Implementation detail: Make sure the old salt really is destroyed.

EDIT: After thinking about this, I think the reason not to do it is that it doesn't really win you much protection over the usual approach -- a single table with userid; salt; hash(userid+password+salt).

In that scenario, if your database is stolen then the attacker will have to brute force each user password individually and compare it to the stored hash for that user. You hopefully used an expensive hash() algorithm so that will be a slow process. The only thing the separate table adds is an extra table lookup during each brute force attempt, which compared to the cost of hash() is basically free.

So yeah, I don't think this really gets you anywhere.

EDIT2: In fact, you get almost exactly the same effect by making your bcrypt()/scrypt() parameters one notch harder. Crypto primitives FTW.
I find it annoying on mobile. I already have a small page, I don't need your banner taking up 1/3 of it !
Above the image of the pink (but labled red) motorbike there is an image of a child wearig a wooly hat. The hat is red with white fluff. That hat is labled pink.

So, it knows "pink". And the motorbike isn't borderline pink / red -- it's not like hunting pinks -- it is definitely pink.

Having said all that I'm amazed at the results. It feels like I'm living in the future.
I don't think it's wrong to argue that point, ie, "I wish this reporter would understand how we work to create a safer environment, look at the stats, etc" but I think it's far out of line to go beyond that and assign "personal responsibility" to someone who is arguing against your product, especially around these sort of crimes. To me, that seems like taking the argument to a really personal place and also, trivializing what should be a serious discussion.
No. Neither did the Mayans.

There has always been a strain of utopianism in the study of ancient history that tries desperately to fit radically implausible social critiques into areas we are ignorant of.

It is the sociological or anthropological equivalent of the "God of the gaps" approach in the hard sciences, which disingenuously begs the question "Does God exist?" by insisting that anything we can't positively and fairly certainly explain by physical causes must be due to the Big Guy in the Sky.

In the case of magically peaceful civilizations, the most extreme instance was the Maya, who up until the last quarter of the 20th century were presumed to have "solved the problem of war", unlike we nasty brutish and short moderns. Then we learned to read their writing, and discovered they were incredibly violent and war-prone, just like every other human civilization: http://articles.sun-sentinel.com/1986-05-27/news/8601310832_...

The similarity between the article's claims about the Harappan civilization to the myths about the Maya are so striking that I've got to say the author and editor are both pretty far out of their depth to have not mentioned it.

So my prediction is that contrary to the article's closing complex question, we won't ever find out how the Harappan civilization avoided war, because they didn't. When their writing is eventually translated there will be the "surprising" revelation that their highly ordered civilization was heavily regulated by highly organized violence at all scales, just like every other one we know anything detailed about.

As a river civilization, state control of irrigation may have played a significant role in social control, but violence underpinned it, and warfare was the largest-scale expression of that violence. Lack of evidence of sacked cities is evidence that they didn't sack cities, not that they didn't engage in war. Maybe they simply killed all the inhabitants in a more organized way. They were, after all, highly organized.

In general, it is more likely that the gaps are filled with things similar to well-studied cases than completely and entirely at odds with them. These mysterious people are deeply fascinating and were clearly extremely accomplished, but the odds are they had basic sociological similarities to everyone else.
Abe $1 Trillion Gift to Stock Market Shields Recession Gloom
> Peaceful harmony is the way of plants, not mankind.

Indus valley civilization survived and prospered for around 1500-2000 years, without wars. IMO this is a proof that peaceful harmony works.
I agree that moderation is necessary, but it needs to happen at the comment level, not the post level.
At many computer science courses, students begin learning SQL and database fundamentals on Oracle database. Is it the right choice for the beginning? Commonly students work on Postgres or MySQL...
https://news.ycombinator.com/item?id=8620479
Is that true? I got the impression the US and UK mostly became major economic powers by being ahead on tech in their day and China mostly by undercutting everyone on price through low wages and low environmental protection. OK China is protectionist but iPhones are made there because it costs less, not because of restrictions on importing phones to China. Dunno if you've got a source? I'll give you protectionism seems to have worked for S Korea though I'm not sure I'd call it a major economic power. Also what I'd think of as the most similar competitor in the area, Taiwan, has a higher gdp/captita without all the Chaebol protecting stuff.
Show HN: We built an open source tool for journalists to inspect Wikipedia edits
Child Homelessness on the Rise in US
Startup Careers 101: Roles for Non-Tech Backgrounds
Well there are standards that can be checked against, and they go to the companies and talk to them. The good ones often already have CSR departments.

If theres something shady happening, it is often not hard to find - there are lots of environmentalists and NGOs that regularly dig up dirt. Also, a company can't just fake a reputation.

Not saying that nothing can be hidden, but its not just bits and bytes and paperwork that can be faked, its the real world.
That was funny, thanks for posting.
Though I wonder what would happen for some of the tasks (dance/exercise, for example) - if all participants had the same lag.
Important announcement for one reason alone, they are finally breaking Google Play Services into multiple dependencies. This will help the average developer avoid the 65k method dex limit.
I wonder why they didn't go with Android. It would be interesting to hear about the decision process.
I've wondered that too. It makes no sense rhetorically to say "I refuse to apologize for the United States." I would think the shooting was an accident. and what do you do when you do something accidentally? apologize. Not doing so makes me fee like were saying that the shooting is somewhere higher up the mens rea scale: http://lawcomic.net/guide/?p=188
Plants eating insects
How to get rid of a stye
Stabilizing Chord
DO NOT click to watch the drone delivery video. Trust me.
On the limit issue: you are assuming the x is real. In the complex domain inf has no sign and the limit is pretty correct. But yes, this depends on assumptions.
Well, under your definition, just any piece of code could be a microservice...

So not very enlightening yet :)
Photographic memory is easier and people are lean to it since you just want to do something with the app and do not want to do something else in between like drawing a letter.

I know that Youtube is on the third screen on my phone, and I can just think about what i am about to search in youtube while my fingers are automatically swiping through. I do not use search button on the phone because it requires my focus to type.

With this one, you need to focus on drawing some letter. which is little bit harder than just remembering where the app is.

Honestly, I could not expect this weak approach from Nokia. They always made me glad with their products. Well, surprise surprise!
Please consider html as main publish format. Pdf is quite inconvenience for screen reading.
Would be interesting to see what the new zero gap screen looks like in person. For people who don't know, screens often have spaces between the front glass, actual LCD, touch sensor, etc.. Zero gap/laminated should improve display quality.

Battery live measurements would be nice too with the Intel processor maybe helping or hurting.
less tapping more apping
> I don't know what's the median size of your objects but if it's < 20k...

I can't remember the exact number off the top of my head, but I designed the average size of each object to be much bigger - more like 64-256M than kilobytes. IMHO this works far better for backups. So I just use the filesystem to store the blobs, which I think works better.
> Every city was surrounded by a wall

This by itself indicates warfare. City walls are huge, costly infrastructure projects that require serious justification for both construction and maintenance. For instance, in contemporary Mesopotamia cities only began to build walls with the emergence of serious warfare at the beginning of the Early Dynastic period (ca. 2900 BC).

> scientists find no layers of ash that would suggest the city had been burned down, and no signs of mass destruction

As the main evidence in the article this is unimpressive. Warfare does not usually result in the mass destruction of cities. E.g. Medieval England had endemic warfare for centuries but London, Bristol etc. didn't get burned down. Factors such as siege methods and building materials also make a big difference in how cities are affected by warfare.
Show HN: Simply Wall St – Pinterest for Stocks in the US, UK and Aus
After re-reading what you wrote you may wish to delete the post or change your profile.
That IS a surprise. Maybe Nokia can finally rise up on its own after all.
Annual Opensource.com gift guide: 14 fabulous open source gifts for the holidays
Science Journals Have Passed Their Expiration Date – It's Time for a Platform
I have a Jolla, and it is simply amazing. Sailfish is a true touchscreen OS. I definitely recommend you try one if you can (at least in Finland, DNA stores might have them).
What will they do with that huge amount of much money?

Personally: I hope they make an UI to FreeBSD on par with OS X, because it already seems to be so stable that no change except security fixes is neccessary in my naïve eyes ☺

Sorry, if this was asked before.
Thomas Malthus also saw other side effects of war in terms of population control:

The power of population is so superior to the power of the earth to
produce subsistence for man, that premature death must in some shape
or other visit the human race. The vices of mankind are active and
able ministers of depopulation. They are the precursors in the great
army of destruction, and often finish the dreadful work themselves.
But should they fail in this war of extermination, sickly seasons,
epidemics, pestilence, and plague advance in terrific array, and
sweep off their thousands and tens of thousands. Should success be
still incomplete, gigantic inevitable famine stalks in the rear, and
with one mighty blow levels the population with the food of the
world.

— Malthus T.R. 1798. An essay on the principle of population. Chapter VII, p61

This was 1798 mind you when he wrote that, and much has been written that shows that food production increases in line with population growth [1]

It is certainly true that the Great War WWI and WWII have had a devastating effect on the European psyche and therefore tolerance to outright conflict, especially over the last 70 years.

[1] http://en.wikipedia.org/wiki/Malthusian_catastrophe
New Technique Could Help to Produce More Reliable Photonic Chips
A lot of Rust people are interested in Rust -> LLVM -> Emscripten -> JS, but there's still a lot of work to do. https://github.com/rust-lang/rust/issues/2235 - and integration is literally going on as we speak, https://github.com/kripken/emscripten-fastcomp/issues/51 . I'm also very excited about Rust - so many other languages that give its kind of safety guarantees are either horribly hard to performance-optimize, or very difficult for someone from a C/C++ background to reason about. As the ecosystem and availability of libraries improves, I see it becoming every bit as big as Go is.
Some things are just too radioactive to touch.
I don't understand your reply. No one is good enough to write code without bugs.
Bootstrapping a Startup to a Profitable Multi-Million Dollar Business
Thank you for your thoughts. In fact, I am more interested into the how can i make this process efficient in the real world, as a scallable service, without competing with the other freelancing sites that offers full projects development. I am more connected to a programmer to programmer service perspective (getCode.org)
This might be a stupid question, but surely basing their theory on simply studying the buried bodily remains would be somewhat pointless if the Harappans burnt their dead?
>Administration officials framed the move as an extension of Mr. de Blasio’s focus on inequality. Maya Wiley, counsel to the mayor, said low-income people, particularly blacks and Latinos, relied disproportionately on cellphone browsing to get online. And data charges can add up.

Free wi-fi is great and all but I feel that programs that mostly benefit the upper middle class are constantly being passed off by politicians as benefiting the lower class. From what I see, smart phones ownership definitely skews to the wealthy, although higher for African American and Hispanic [0]. Is there something I'm missing here?

[0] http://www.pewinternet.org/data-trend/mobile/cell-phone-and-...
This is really interesting concept - where are you getting all the data? Yahoo Finance API?
Yes, exactly. At first we wanted Ruby, but compiled. We started with something that was very, very similar to Ruby (except some dynamic aspects) but the type inference algorithm was very slow. So we made some sacrifices (like telling the compiler the types of Arrays and Hashes) and that made the compiler very fast. But at that point we diverged from Ruby because the syntax was starting to be different at places. Then because of how we deal with Nil we changed some of Ruby's semantics (like, Array#[] raises when out of bounds), so we can't say Crystal is a compiled Ruby: it's a totally different language. It just happens to have a pretty similar syntax and API to that of Ruby :-)
Nokia Launches 7.9 inch Tablet with Android 5.00
Campaign Monitor acquires GetFeedback
Thanks man, all the data comes from S&P Capital IQ.
Computer that kids can build and use
Pay People for Commitment, Not for Time or Results
42 Tips and Tricks for Mobile Landing Page Optimization
Philae finds comet harbors organics
What Happens in the Brain When We Read
Gradient Ghost Buttons
I take slight issue with this quotation -

> Though the idea of a street grid seems perfectly ordinary to city-dwellers today, it was unusual at the time. Most great cities in Mesopotamia, for example, had curving streets and a more organic-looking layout.

Maybe a street grid seems ordinary if you live in a large city in the US, but most European cities don't have gridded streets (and I don't think it's the norm in many other places in the world either).
works on my Nexus 4 (CM11)
You know what I find the most disturbing about this whole story?? "He also sits on a board that advises the Department of Defense"
Yeah, that's been the official line for a few years - nothing to see here, move along.

The issue is not whether or not there was fraud. The issue is that some affected people still have not regained trust in the words and assurances of the leaders, and still cannot make sense of the outcome.

Into cracks of distrust fall the seeds of unpredictable change.
Almost certainly not. Stephen Pinker has a whole book discussing not only why not, but why some people are willing to ignore both evidence and reason in order to believe it anyway: The Blank Slate: The Modern Denial of Human Nature (http://www.amazon.com/The-Blank-Slate-Modern-Denial/dp/01420...)
The headline casts the idea in positive terms.

But here's another way to phrase it:

Limit people's pay not because they do poor work, but because they have other sources of income.

The author of the piece argues that results-based pay is problematic because it encourages people to cut corners.

But that doesn't mean that results-based pay is bad; it just means that you need to very, very clearly define what results you're expecting, and very thoroughly QA the work before accepting it.
How do you opt out of airports?
I would phrase it the other way around, Nvidia support for OpenBSD is very, very sad.

The OpenBSD project refuses to include binary "blobs," and Nvidia just simply don't provide open-source drivers for their cards. There's been some indication recently they may be changing their stance on that, so we can hope.

All that said, the BSDs, and OpenBSD in particular do not have ultimate video performance as a goal. While OpenBSD is certainly usable as a desktop or laptop OS (I use it) you are best to stick with Intel or AMD graphics adapters. FreeBSD might arguably be a "better" desktop OS but I prefer OpenBSD's focus on consistency, security, stability, and documentation.
Package management is probably, today, a very well defined problem. Isn't it time to solve this once and for all? Or are we forever doomed to have multiple package managers for the dot product of [operating system]X[development platform]?

It itches me that php has pear and composer, node has npm, ruby has gems and python has pip. It itches that deb and rpm solve the exact same problem, not to mention all the other smaller package formats/managers like pacman, yaourt or portage. It looks as pretty obvious that it is the same problem, albeit attacked via some different angles (source build versus binary distribution notably).

It even looks like it could be cross-platform, solving in one simple swoop at least unix systems (namely linux along with the BSDs) and, in a dream world, non-unix systems (windows, notably).

Daydreaming, yes. The status quo is too well established. But it justifies my jaded look regarding Guix: Late comer to a party that is already stale and over.
Presumably, Tumblr also uses Scala for the services themselves... and by assuming Scala, they can make the API more idiomatic.

(For me, the question runs the other way -- I need a very good reason to write a codebase in Java vs. Scala these days, although I understand not everyone feels the same.)
I think a lot of it depends on the individual and I've been told several times that the variety and strain can make a big difference.

Anecdotally, it used to make me relaxed and only occasionally a little anxious if I had to unexpectedly play "straight" while under the influence.

Nowadays it's like a 50/50 shot whether it will just give me a "buzz" or whether it will make me incredibly anxious. I've mostly chalked it up to the stronger stuff I'm more likely to come across now that I'm not a broke college kid buying the cheap stuff but I also think a large part of it is that I'm a different person that I was 15-20 years ago and perhaps I just don't react as well to it anymore.

Either way, I mostly abstain these days except when I'm in a situation where the potential for anxiety is incredibly low.
I was wondering the same thing, but I think that a part of the project is exploring the concept that perhaps one day prostheses will no longer just bring those who need them up to parity with the rest of the population, but will instead extend them past the natural capabilities of a human. Technologically the creators could've recorded these sounds with an iPhone, but the message would've been different.

They're exploring the same space as Neil Harbisson's Eyeborg project [0] and John Scalzi's book Lock In [1].

[0] http://mashable.com/2013/06/01/eyeborg/

[1] http://www.avclub.com/review/john-scalzis-lock-crams-big-ide...
Just Works
California Lemon Lawyers firm
"Peaceful harmony is the way of plants, not mankind."

Bwuh? Plants do not live in peaceful harmony. They just fight in ways that are not immediately obvious to the naked human eye, mostly involving things that we humans would consider serious violations of the Geneva convention. But they are as vicious as any animal, just differently.
Europe signs on to Orion venture
3 common data problems: Are you asking the wrong questions?
> When Godaddy came out in support of SOPA, after a string of other obviously bad actions, I thought for sure it would harm their business.

It hurt them enough to reverse their stance on SOPA in mere hours. Have you been to godaddy.com lately? "Internet freedom!" is actually one of the things they advertise on their page.

Now, I too was hoping in those days that the company would just die... and that's unlikely to happen to Uber as well, considering that dollar is kind and a lot has been given to Uber by so many investors. The best you can hope for is a massive firing of executives at the top, since that's where a lot of toxicity seems to be coming from.
Perion Network Launches GrowMobile Cross Network
Much more likely than Xophmeister's explanation, I think, is that the brightness of a color in an image is relative to the lighting condition. (Remember that pink is just white mixed with red.) See image B:

http://www.huevaluechroma.com/pics/3-4.jpg

This is also true to some extent with the actual hue (i.e. red versus green, rather than brightness; see image C) but less so.
US V. Brown, Dist. Court, MD Tennessee 2014
It still covers those topics, it just uses specific implementation examples to help you understand it. It is all still applicable to other hardware, but the entire field (that is in the scope of an entry level cert, at least) is pretty reliant on knowing the OS and scripting language of the hardware. I don't know how you could say it is mostly about underlying network concepts when over half the test is implementation specific Cisco questions. Maybe the changed it?
One exciting thing I found was that if you buy (say) a wordpress plugin from the US that integrates with a particular PayPal api/membership level, PayPal will helpfully give that same API or membership level a different name in the UK and slightly tweak the permissions, but not document it anywhere.
Systems Topic Generator
I'll just leave it here. For years I've never had any issues with hetzner (having few dedicated boxes in different DCs). Few weeks prior to seizure there were suprisingly long downtimes in a few DCs due to "router issues", and then some with kind of "power outage?".

It is far fetched but if is anything close to truth I cannot imagine how US gov can influence company based in Germany so strongly that it would cost it a lot of reputation and lost clients.
Sideprojectors is the other place I've heard of:
https://www.sideprojectors.com/project/home

What general role does she need from her partner?
I love this post. I've long been guided by a simple saying, "Accomplishment is only for those who need to validate their existence."

Obviously it doesn't apply to work, but what you do in your free time. Or time not allocated to earning money. But free time, and weekends. Do you spend that time on others, for the sake of them acknowledging your existence? Or do you spend it on yourself, making you happy?
Nix (and by extension Guix) are meant to be this solution you're looking for. The problem, as with most unified solutions, is adoption.
No joke. Brainwallets use keys derived from a passphrase. Of course the passphase has to be reasonably long and something no one would ever guess, but even a randomly generated passphrase is easier to memorize than a long string of characters.
Kudos for launching it under CC3 license, I'll surely listen.