skysight-inc/HackerNews huggingface dataset:
Right, don't do this, for the reasons given.

You can, however, do the high-cost hash on the client, then do a low-cost hash comparison of the result on the server.

So you do a cheap SHA256 hash comparison on the server, but because the input to that comes out of, say scrypt, it has 256 bits of entropy (or near), making cracking infeasible. (scrypt has variable length output, so you could use other hash sizes).

This is only done when checking; when setting the password, both the slow and fast hashes are done on the server (to stop someone just hashing 'password123' with SHA256 and sending that).

This is called server relief. There's a discussion of it elsewhere in this comment thread, it is well known, e.g. [1], though doesn't google particularly well.

The downside, of course, is that someone with a disabled or borked javascript can't login to your site.

[1] https://books.google.co.uk/books?id=uZ-1BwAAQBAJ&pg=PA370&lp...
> Another thing we don't really have is air conditioning (might be a climate thing).

This one is a climate thing.
I use pidgin on Linux, for IRC and many different IM protocols. It works on Windows as well.
In English, anyone?

It's really hard to follow this. I realize they are trying to make it an explanation that normal (but interested) people can read. But it's not working.

Maybe an example up front would help. Something like: If this is enacted, then ... (some common use case involving fair use and how it would be impacted).

I know it takes a lawyer to read this stuff. But they should maybe pass it through a couple of layers of translation to try to communicate what it means, so that people can get on board with opposing it, if that's the right thing to do. If EFF can't communicate this stuff, who can?
I built a door system intended for a small office with a Pi, some sparkfun components, and Go. My code is here: https://github.com/GauntletWizard/vnw ; If anyone wants a more detailed explaination, I'll try to write one up.
Ground water is also a limited public resource. In fact, draining an aquifer can have even more dire consequences than draining a surface river.

The fact that California law allows unlimited water withdrawal until 2040 is literally a tragedy of the commons.
One hour on GitHub
I took a general biology course given by Wilson, plus an ecology course for which it was a prerequisite, but that is the extent of my knowledge in this field. Both of those were a long time ago. I don't know enough to make such a recommendation.

However, if you don't mind a general comment, this whole "controversy" has an element of "angels dancing on the head of a pin" to it. It is still the case that evolutionary biology falls somewhat short of many other sciences with respect to empirical rigor. Many of the concepts that the field presents (e.g. "ring species", "punctuated equilibrium", etc.) are primarily narrative or even ad hoc. Sociobiology particularly suffers this condition, and evolutionary psychology was basically written by Rudyard Kipling. My impression is that Wilson has made some progress past that (I'm thinking of his island experiments), but evolutionary biology is stuck in the Age of Philosophy. The field hasn't really had its Copernicus yet, let alone its Newton. I say that not to denigrate the entire effort, but to put this particular argument into context.

As any grad student will tell you, however, we must value parsimony, and on its face this paper seems to have that over kin selection.
I was skipping some complexity. Something like b/scrypt are more than just hashing. They are key derivation functions, which look similar to hash functions on their inputs.

bcrypt for instance generates a random salt on the input and stores it in the output.

http://stackoverflow.com/questions/6832445/how-can-bcrypt-ha...
I think learning J is a project that will take more than 24 hours, not something that where naive intuition is going to produce significant progress...the documentation implies as much. It's Emacs not gedit.

Then again, I don't think any powerful programming language is going to be easy to learn. Turing machines or lambda calculus, take your pick, are hard concepts when it comes to navigating all their implications. That's what allows them to capture all of computation. Python or Ruby or whatever may push the point where the power to complexity curve goes asymptoticly vertical a bit to the right, but it's still there and steep as a wall.

J doesn't pretend to be English. It tries however to have a logical grammar that reflects the grammar of natural language rather than a vocabulary that does.
List of April fools attempts – 2015
SEEKING WORK - Remote / London, UK

A designer / front-end developer / consultant who has been working with the web for about 6 years now. Coder turned designer. I believe that design is a process inseparable from code and is best when it happens in the browser. Proficient in HTML/CSS/JS, as well as working with a great developer that I have been involved with for a couple of years now. He can handle both front-end and back-end, both smaller and larger projects.

A few projects:

- http://equaliserldn.com - design (code by Piotr)

- http://www.wcommunications.co.uk - design (code by Piotr)

More projects and a better overview of my skills: http://kubabartwicki.com

Get in touch at me@kubabartwicki.com 👋
Sec. 3. The prohibitions in section 1 of this order include but are not limited to:

(a) the making of any contribution or provision of funds, goods, or services by, to, or for the benefit of any person whose property and interests in property are blocked pursuant to this order; and

I assume legal advice can be construed to be a "service"?
Symphony.com Sr. Java Backend Software Engineer

Symphony.com is looking for a senior-level, server-side Java software engineer to support its exponential growth.

Design and implement the cloud-based server-side logic for our secure communications platform.
Above and beyond creating features for a cutting edge messaging application, our engineers design and implement utilizing open source stacks (e.g. hbase, kafka, solr), extreme scaling within the cloud, encryption in transit/at rest, and a deep list of technical challenges to sink our teeth into every day.

Profile: 10+ yrs server side Java software engineering

About Symphony: http://www.goldmansachs.com/what-we-do/engineering/see-our-w...

Resumes to careers@symphony.com
> Another thing we don't really have is air conditioning (might be a climate thing). It's insanely wasteful and chances are you'll be sweaty anyway.

The average high in Munich in July is 23 °C. In Los Angeles, it's 28.4 °C. In Death Valley, California, it's 47 °C. (That's average. The highest temperature ever recorded is 57 °C.)

23 °C is what most Americans set their air conditioners to. If it never got hotter than that, we wouldn't use them either. For example, where I live (Seattle, near the northern border of the US and on the ocean), air conditioners are uncommon.
Genestack - www.genestack.com - UK/Russia - Software Engineers - Fulltime

We provide a format-free, web-based platform for bioinformatics research. Work with us on changing how bioinformatics applications are built.

BIOINFORMATICS APPLICATIONS DEVELOPER (St. Petersburg, Russia)

We are looking for someone to write modules for working with biological data types, and to develop bioinformatics applications on the Genestack platform. This will include being part of a team developing data visualisation apps, working with diverse file formats used by biologists and bioinformaticians today, writing data processing and analysis scripts. Complexity and diversity of tasks will depend on your skills and wishes.

Requirements:

- Java and Javascript (at least one of the two should be above average);

- an interest in working with biological data and applications;

- good knowledge of technical English.

Contact us at jobs@genestack.com

SENIOR SOFTWARE ENGINEER (Cambridge, UK or St. Petersburg, Russia)

We are looking for talented engineers for key roles in building our cloud genomics OS.
What you will be doing depends on your background and interests. There are challenges in diverse areas:

- design and development of APIs for working with genomic data (Java);

- development of compute-intensive bioinformatics applications (Python, R, C/C++);

- research and implementation of optimised (time, I/O) means of data storage;

- scheduling and control of jobs in cluster environments (AWS and others);

- and many others.

There is no requirement to know biology/bioinformatics, but being curious and willing to learn new things is a must.

Contact us at jobs@genestack.com
High density doesn't always equate to pleasantness though. It still has to be done right to be livable.

I spent last year living near Columbus Circle (the southwest corner of Central Park in Midtown Manhattan) which is probably equally dense as Battery Park, and didn't care for it much primarily due to its mixed use. The population density is quite high there, but it is mixed in with office buildings that suck the character out of the area. In particular, returning there at night didn't feel like "coming home" to a neighborhood. We've since moved to a neighborhood that is almost exclusively residential (but still dense) and the difference in character and livability is very noticeable.

High density if not done right also can have a negative psychological impact (tall buildings means less sun), constant crowds might mean less chance to destress, no greenery, etc.

The point is, density isn't the only requirement, it has be done right, so practicing a bit of restraint in allowing building might make sense.
No, if your db can use SSL, then additional layer of complexity is not required.

upd.: don't get me wrong, Redis is my favorite DB, really. But better to be objective.
Are there any proper KDFs that don't include a random salt?
Yeah, it surprises me, whenever I stop to think about it, that this isn't more common by now.

In the group I work in we make heavy use of email, of course, and we do have a few remote people who call in via VOIP to meetings, and sometimes we do screen sharing with them, but that's about as far as it goes. We rarely do video, though all our laptops have webcams. We do have a room with a fancy videoconferencing setup with cameras that focus on the person currently speaking -- it's very nice, but it can only connect to another setup of its kind, and the remote people on my team aren't in the one other location I know of that has such a setup; so it's not nearly as valuable as one would like.

The upshot is, I'm left agreeing with those who say that the most effective collaboration still requires being in the same place. Our remote people are certainly productive and part of the team, but we just don't have the same kind of impromptu conversations that I have with my podmates.

And I wonder what the solution might be. Double Robotics [0] certainly has an interesting take on that question; I don't know anyone who has tried it, though.

[0] http://www.doublerobotics.com/
I live near many strawberry farms. They all use spray irrigation. Additionally they tend to run the sprinklers during the hottest parts of the day (mid-afternoon). I've been told this is intentional because if they did it when cooler then water wouldn't evaporate and parts of the plant/fruit would degrade potentially even rotting. Many locals joke that we export our water in the form of strawberries.
I don't understand this comment.

Are you somehow interpreting the stolen database as the rainbowtable somehow?

Are you saying that, when the attacker calculates the hash, it's analogous to looking that hash up in a rainbow table?

My understanding was ryan-c was describing a database that has a hash(global_salt+password). This concept of the global_salt was introduced specifically to baffle rainbow tables that attacked databases of hash(password)

ryan-c was describing how, if you have a database of salted hashes, the attacker can check every entry in that database against attempt, multiplying his efficacy by the number of people in that database.

To me, these are different threat vectors, rainbow-tables attacking hash(password), ryan-c describes attacking hash(global_salt+password), and to mitigate ryan-c's attack you must do hash(unique_user_salt+password)

can you explain to me how ryan-c's attack is analogs to a rainbow table?
Directly from the article:

"State officials said the order would impose cutbacks on water use across the board — including homeowners, farmers, cemeteries and golf courses."
Yes, California's historical (lack of) ground water regulation and tracking was/is disturbing. Nobody has any idea how much is there or how much we are actually using.

There are limits on extraction going into effect [0], but it may be too late by the time they are supposed to happen.

[0] https://www.hcn.org/issues/46.19/californias-sweeping-new-gr...
Fullstack (YC S12) Is Hiring Full-Time and Part-Time JavaScript Instructors
TL;DR: Fullstack Academy is looking for multiple instructors for our part-time and full-time courses in New York. If you've always enjoyed teaching/mentoring people, this will truly be your dream job. Positions open for our weeknights/weekend course and also for Full-time positions. Interested? Apply at http://bit.ly/each_one_teach_one

Fullstack Academy (YC S12) is an Immersive Software Engineering school in NYC. Some things about us:
* We are one of the most selective such schools in the country. Our students are passionate and smart. This makes teaching a lot of fun.
* Along with teaching, you'll also get to work on building cutting-edge educational software.
* We also just moved into an awesome new campus in Manhattan.
* We were recently named "Best Coding Bootcamp" in the country by SkilledUp: http://bit.ly/fullstack_wins_best_coding_bootcamp

Sound interesting? Please apply now at http://bit.ly/each_one_teach_one
It's a first world problem, to be sure.
Sorting by popularity like Reddit with Ruby, PostgreSQL and Elastic, part 2
Certainly for California. But what about New York for example?

Have a look: http://www.eia.gov/consumption/residential/reports/2009/air-...

// Can't find numbers for Germany, but I can tell you that I don't know anybody who has AC at home. (I'm not a hippie.)

// You know how examples work, right? The data is pretty clear: More than 60% of households in the USA have AC.
Symphony.com Mobile Interface Designer

Design the interface for the mobile version of Symphony's product - an enterprise-class, messaging application, including client-based, end to end encryption and related security in the browser.

REQUIRED SKILLS AND EXPERIENCE
• 5 to 8 years pro interface design experience
• Minimum 3 years pro mobile interface design experience
Portfolio required

Resumes to careers@symphony.com
It looks like you've just jumped to a conclusion. That may be wrong.
1. Yes, that's what capital gains taxes are

2. No, but you can use the losses to offset future gains without paying tax (you aren't penalized for an asset depreciating then re-appreciating)
But does anybody use them?
For your use case, I'd drop both Rails/Django and instead go for something like Meteor.js.

You'll get the benefit of a full stack framework with one language for both frontend and backend. And most of the batteries are included so you can become productive very quickly.

If you choose Rails or Django, you're taking on the complexities of these frameworks + Javascript on the frontend. That's a tall order for a 3 month project when you have zero experience with all the technologies. It could take you 6 months to a year before you finish your project.
They're aiming for a course that is consistently _just_ at the limits of what the racers can accomplish. If they wanted a track that no one could beat, they would just add 50 extra miles...
Simpson's paradox paradox comes into play here a little bit. Your risk of dying of prostate cancer is in the ballpark of 1 in 40 but your risk of dying of heart disease is 1 in 4.

If trading a higher risk of prostate cancer for a lower risk of heart-disease (which others have mentioned) might be the better choice here.

Caveats abound here, of course, but just because something 'increases your risk of' something doesn't mean it's an aggregate loss.
Solar power is more expensive than fossil fuel power. The solution to "desalinization is too expensive" is not to say, "But what if we used a more expensive form of power to do the desalinization?"
I wonder if, after a certain density of traffic, these advanced/well timed schemes are actually detrimental?
New York, NY or Remote

Senior Full Stack Engineer | General Assembly

We're a new kind of education company teaching people who either want to level up in their career or make a career change in tech, business, and design. In the two years I've been here, the development team has become a tight-knit, get stuff done team with a seriously good work-life balance.

The position details:

- You have 3-5 years of experience as a mid to senior level engineer

- You're used to working with Rails & Ruby and you have advanced experience building RESTful web services & APIs

- You have experience working with a variety of languages, with a strong grasp of their pros & cons

- You're a kind & respectful person, invested in contributing to a wonderful team culture (bullies & big egos strictly not allowed)

- You are occasionally enthusiastic to the point of being profoundly uncool

- You get insanely excited by at least 1 thing that has absolutely nothing to do with computers

Some other things that would be really nice to have ...

- Strong front-end development skills

- Experience designing service-oriented architecture

- Web operations or system administration experience
Sounds like a startup needs to start start developing and licensing traffic light software to municipalities. Seems reasonable enough to me.
as a web dev, the main thing i'm looking forward to is its "evergreen-ness" for all the web's consumers not on Chrome or FF.

now only Safari left to make a similar commitment and shorten the release cycles...
There are two different water systems in California. The Central Valley Project [1] is run by the the federal government, the California State Water Project [2] by the state.

[1] https://en.wikipedia.org/wiki/Central_Valley_Project
[2] https://en.wikipedia.org/wiki/California_State_Water_Project
San Francisco

A little more on Academia....

Academia is a disruptive, Scientific Author Publishing and Certification Service, that disintermediates the current monopolistic $10B 100-year old scientific publishing system and accelerates the speed by which papers are peer reviewed and published. Academia’s research suggests that publishing a paper through Academia, while using the Academia Citation Advantage (the ACA), will receive substantially more citations than pay-for-access articles. The site was launched in 2008 and as of March 2015 we have over 20.4M registered users, with over 30M UVM who've uploaded over 5M articles, growing at over 10% per month.

Academia is located in San Francisco, on Kearny St, near the Montgomery BART station. Although we are recruiting for Full Stack engineers, we are seeking software generalists who know their applied computer sciences.
Our stack:
FE coffeescript, backbone.js, html5, css3, d3.js, angular
BE: ruby, RoR, postgres SQL, dynamo DB

Company Website: http://www.academia.edu

Please send me a paragraph about yourself. hiring@academia.edu (Stuart Liroff, VP of Talent)
Please note that is not a universal properties of SPI devices. Only some can be daisy chained. E.g. the first google-hit I get for an "SPI ADC" is the MCP3004 that doesn't daisy-chain.
PG Socks
Of course you fail to mention how much water in the form of crops (especially alfalfa) are being exported. That wouldn't fit in with the friendly local farmer providing nutritious food narrative, now would it?
The best adaptor I have seen for the esp-01 is a chunk of IDE/ATA cable ribbon connector with 90 degree header pins soldered to it...

http://imgur.com/a/GGvUO
Ha I always find a way to forget the term for this. So thanks for bubbling it up.
I think this is a bit of a non issue. Wouldn't a bad community or developer become evident when you started looking around at how to help and contribute to the project?

Just recently I decided I was bored with my routine at home and wanted to challenge myself. So I set a task: pick a public repo that I don't already maintain (preferably that I use), find a bug I would like to see fixed (emphasis on would like to see the bug fixed), and to fix it.

I ended up choosing a program that I use but is written in a language I'm not familiar with. Regardless, I jumped right in.

First I looked around for any mailing lists or chat rooms where development discussion is carried out. I joined and asked how I can help, and was directed to the bug tracker and told to go nuts. I can see how this can be a daunting task, but I found the easiest way forward is to put those feelings of being overwhelmed aside and to just start. I cloned the repo and grepped for a tag I hoped would get me to the code I needed, luckily it was a good guess.

I spent the weekend reading the code for no less than three different projects and learning a lot about erlang, and by yesterday evening I had a patch created and a pull request submitted. And I feel fantastic for it and am looking forward to setting a similar challenge next weekend.

My point is that I think part of looking around the project and bug tracker should help you figure out what the attitude of the Dev team is like. I don't doubt there are sour devs our there but IMO they are few and far between, more likely is the unresponsive maintainer who lost interest in the project but still has the keys to the kingdom.

What's the worst case scenario? You create a patch and the project maintainer refuses to merge it? If he doesn't provide good reasons for not wanting to merge it, he looks bad. If he says your code quality needs improvement you can ask for specifics and learn some new tricks. If he says he just doesn't want that feature then leave your code up on github and see if other people start advocating for having your issue merged. This seems like a tempest in a teacup to me.
I spent 10 days in Costa Rica last month and didn't have a data plan with me (so Waze is way less useful).

I used (and liked) the maps from Cenrut.org, which are easy to install on a Garmin device I brought with me. You can also rent GPSs from the car rental places, but for a long stay, it's just as cheap to buy a Garmin here in the states and install the free Cenrut maps.

The Cenrut data wasn't perfect, but it was way more than adequate. It would be madness to try to navigate the country from only a printed street map!