skysight-inc/HackerNews huggingface dataset:
There are separate concerns of brute-force mitigation that people should look into regardless of their hashing technology. Things like exponential-growth cooldowns per IP/user account (with lots of caveats to prevent cooldown-DDoS) should be used.

http://stackoverflow.com/questions/549/the-definitive-guide-...
The main point is that you shouldn't rely on an implied rule that comes from the oddity of the length being 0 on a list.

If I'm looping through a list, it's because I want to loop through it and process its items. I'm going to return/skip earlier due to whatever reason, and not rely on the "logic" for processing being built into the length of the list, or whoever populates the list.
SEEKING WORK - Remote or Seattle, WA

I am a full-stack JavaScript developer with ~7 years of web development experience. I can do anything front-end, JavaScript, or Node.js related. Need a web application built using your hot, new, and obscure framework? I can do it. Need me to build you a robot that serves you coffee while you work? I can do that to (thanks johnny-five). Need me to learn an entirely different language? Sure, let's do it!

I am currently looking for short-term gigs (max 6 months), or part-time work. I'm open to working remotely (and have 5 years experience doing so), or working in Seattle, WA.

Buzzwords: HTML5, CSS3, JavaScript, jQuery, Angular, React, Node.js, Express, MySQL, MongoDB, LOLCODE

Website / Blog: http://matthewmeye.rs/
Github: https://github.com/mgmeyers
LinkedIn: http://www.linkedin.com/in/mgmeyers
Moz is offering support to all users through Snapchat.

http://moz.com/blog/snapchat-support
Congrats to you folks. I had my first Spotted Cow Wisconsin-only unfiltered beer when I stopped by your Madison offices while roadtripping the US in 2013. Awesome to see things are still going well!
Reminds me of some other quotes from the past.

"There is practically no chance communications space satellites will be used to provide better telephone, telegraph, television or radio service inside the United States."—T.A.M. Craven, Federal Communications Commission commissioner (1961)

"Everyone's always asking me when Apple will come out with a cell phone. My answer is, 'Probably never.'"—David Pogue, The New York Times, 2006
Most likely A/B testing showed increased revenue on the page when they did the slimy javascript jump.
9 Easy Ways to Succeed Using Big Data
> Cantrell was inspired to hold a race in the rugged mountains by James Earl Ray’s failed 1977 escape from Brushy Mountain State Prison.

My southern racism sense is tingling.
Embrace Pet Insurance Proud to Say Direwolf Coverage Is Coming

http://www.embracepetinsurance.com/about-us/press/direwolf-c...

Disclaimer: I work there.
> There's some interesting things in here.

And, what might those be?
Slant - San Francisco, CA - FULL TIME
- Who we are:
Slant tells people what they should buy. Our vision is to own the consumer experience for discovering products and deciding which one to purchase.

We’re currently a small team of three: two experienced developers and a “non-technical” founder whose last job was building satellites for NASA.
A major revision to the current product is in the works, but you can see a live version here: www.slant.co. Some info on our investors/advisors: https://angel.co/slant

- Our tech
Backbone-based front-end, with improvements to allow it to run on both client- and server- side, and as both a single- and multi- page app. RESTful backend written in functional Coffeescript on Node.js, with a temporal postgres database that allows for rewinding to a previous state. The codebase is written in Coffeescript, Jade, and Stylus. Entertaining git history. Gratuitous use of Monads.

- What we're looking for
We're a multidisciplinary team, so we'd love to hear from full-stack/frontend/backend engineers as well as designers familiar with html/css. We're optimizing more for hiring someone talented, rather than for a specific role. If you’re interested in learning more, email me at stuart@slant.co
Visual Studio, like most game developers.
Damn, I upvoted this thinking it was real. It's just plausible enough that it could work.
> Moxies point of concern with regard to requiring a heavier CPU and memory commitment on the server is still valid, particularly when faced with malicious traffic.h

How about this: Save two hashes, one low cost, one high cost--both must pass for login. Don't run the high cost unless the low cost one works first.

Note: not a security guy, so I'm probably overlooking something silly.

Edit: the two responses below (thus far) are reasons you should not do this. Duh on my part.
Actually, if USAians used as many watts per person as Costa Rica(8x fewer - 1683 wpp vs 207 wpp[1]), our renewable infrastructure would be able to support us entirely(currently 13% of total generation)[2], and infact we would have power to spare.

[1] http://en.wikipedia.org/wiki/List_of_countries_by_electricit...

[2] http://www.eia.gov/tools/faqs/faq.cfm?id=427&t=3
Reddit Gets Subpoenaed Over Darknet Subreddit
MS Definitely win here.
Instead of an alert popup use a on screen popup in the upper right corner that shows that something was added and then fades away after a few seconds.
====================================================================

SEEKING WORK - Remote / Atlanta, Georgia

Highly skilled at MVP development. Will help you turn your business idea into a fully functioning prototype.

Full-stack developer and designer.

Over 15 years experience and excellent communication skills.

Recent Projects:

* http://duetapp.com

* http://theanchorapp.com

* http://boulevardjs.com

More: http://letsbuildanapp.com

Contact: projects [@] 23andwalnut.com

====================================================================
Upon re-reading my comment, it sounds more critical than I had intended. I really like your site's clean design aesthetic. Great work.

p.s.

Please never come to Arizona. That will remove my last excuse for not going camping (purchasing a bunch of stuff, that I may never use more than once).
Are single purpose accounts like femingineer considered a faux pas on HN ?
Every submission they have is from the same website.
I believe HTTP basic auth checks the username and password on every request. It's pretty rarely used these days though.
Is this still true? I see some articles suggesting it from around the time that Android 2.1 or lower was a "mid range" smartphone.

It doesn't seem like it ought to be true. Running bcrypt in Ruby with default settings takes small fractions of a second on a few-years-old Macbook Pro. Even if the smartphone is 100x slower, it should be within the realm of reason to run a process that might take 1-2s once every thirty minutes or so.

Now, I'll buy that if your target device is not a mid-range smartphone, but "the very bottom of the smartphone market," bcrypt might be too expensive.
That's actually pretty established technology nowadays. I'm not surprised they're using it.
Airbnb's April Fools Joke Is Confusing
nxt> - Princeton, NJ & New York, NY - FULL-TIME - ENGINEERS

https://angel.co/next-angles

Clojure, ClojureScript, Storm, Semantic Web, Prolog, Datomic, Cassandra, Om

We are building a system that takes fuzzy human language financial regulations and transforms them into something computable: rules. Rules are then executed against billions to trillions of triples and all information (raw and inferred data) are presented in a UI that gives the user tools to navigate, manipulate and analyze linked data.

The conceptual heart of the system is a set of semantic web standards that allows us to formally model data and rules. The technical heart is Datomic, Storm, Clojure, ClojureScript and Om.

brianrubinton@gmail.com
WebAction | Palo Alto, CA | Big Data Platform Engineer (Java), UI Engineer (JS/Backbone), UI/UX Designer

WebAction is a Big Data Platform that focusses on real-time, streaming analytics and making complex, powerful capabilities simple for end users. Every component in our platform is controlled by interactive, web-based drag/drop operations and/or a declarative SQL-like language.

Big Data Platform Engineer (java): http://chj.tbe.taleo.net/chj04/ats/careers/requisition.jsp?o...

Senior Front-end Engineer: http://chj.tbe.taleo.net/chj04/ats/careers/requisition.jsp?o...

Front-end Engineer: http://chj.tbe.taleo.net/chj04/ats/careers/requisition.jsp?o...

UI/UX Designers: We don't have a job post up yet, email me at john@webaction.com if you are interested! Bonus for you unicorns (designers who use code as a prototyping tool)

WebAction is founded by a team of Silicon Valley executives with a track record of creating multiple successful enterprise products including WebLogic (now Oracle WebLogic) and GoldenGate software (now Oracle GoldenGate). We've raised north of $11m since 2013 and our advisors/board have done amazing things like creating the Apple logo and founding one of the top VC firms in Silicon Valley. With every product release, we delight our customers and engage new ones at an ever-growing rate. We're based in Downtown Palo Alto, minutes away from the caltrain, a philz coffee, and everything else you need to make your work-life comfortable as possible!
Shopbop - Madison WI, New York and Vancouver - Senior Software Engineers

Shopbop is a wholly owned subsidiary of Amazon. Shopbop.com and EastDane.com have customers in 165 countries and can be found on multiple platforms including iOS, Android and Kindle. Plus you get the perks of being a part of the Amazon family while still functioning like a smaller organization.

Apply at: http://bit.ly/19FJsX0
Or email your resume to:mujoanne@amazon.com
Location: NJ

Remote: Yes

Willing to relocate: Yes

Technologies:

s/w eng: c,python,ruby,bash,Linux,web(devops,php,rails,js,ajax,css),DBs(mysql,postgres,marklogic(nosql)

infosec: social engineering (physical,phishing,phone),vuln assessment (nmap,wireshark,metasploit,etc), pentest (metasploit,veil,nikto,uniscan,sqlmap,burp)

forensics: encase,ftk,many many open source analysis and investigative tools

cv: https://docs.google.com/document/d/1MsBkPzpwr-7VStD8_m6yZt2V...

email: cory [at] cryptfold [dot] com
I was about to make the same post.

If a database is popped and people know John123's password, and his hash is the same as Worklogin456's hash, then they know my password.
Thailand Lifts Martial Law, but Critics Say Its Replacement Is Worse
> This is how civilizations collapse...let's be honest.

You're right, it's a little known fact that the cause for downfall of the Roman empire was the ability to order personal hygiene products using a button placed in people's home!
The "Great Attractor", it's called, is quite interesting. Though this article doesn't delve much into it, there's more information about it on wikipedia. https://en.wikipedia.org/wiki/Great_Attractor
I'm always impressed by how hard people will work for a for-profit company for no pay. Anyone here ever work for CDDB back in the day?
I have a feeling that many new car buyers figure out a way to get around the import tax - probably by driving them in through Panama or Nicaragua.
Pirate3D (Singapore) − Part time, REMOTE. Web back-end & front-end. Later VISA sponsorship to Singapore possible.

Our main product is the Buccaneer, a 3D printer designed to be affordable, sleek and user-friendly. The printer comes with native smartphone and PC apps to control the printer, and with access to Treasure Island (http://treasure.is/), our webstore for 3D models. The focus is on providing a one-click printing experience, where users can expect any object on the store to print well without changing any setting. The challenge is to get Treasure Island to provide printers with the optimal printing settings for each object.

You will join our team over on GitHub, Slack and Google Hangout, and will be given the responsibility of leading the development of the Treasure Island project. The web stack is AWS, Lavarel, MySQL, Ember.JS. You will also be expected to help the team with integrating the store within our native apps.

You are not expected to excel in every part of the stack, as we will accept up to 3 part-timers on the project, and each can specialize according to their strengths.

If interested, send an email with your achievements and aspirations to Kai at contact@kaielvin.org
iCracked -Redwood City and San Francisco (Soma)-

The worlds largest on-demand mobile buy back, repair and warranty service continues to grow exponentially.

WANTED: Product Designers, Product Managers, Back End Engineers, Front End Engineers,iOS Programmers and many more!

Visit https://www.icracked.com/careers
Complete rewrite of HAProxy in Lua
That calculation can't be done without knowing the bcrypt costs used to benchmark the rig and on the unknown password (I was pondering a similar calculation on another story and the only thing I found was a brief statement that pw crackers report performance for cost=5 (just by habit/convention).)
If you have a high cost and low cost hash, someone getting the password database can just crack against the low cost hash. Even if the low cost hash is short so that it frequently returns a false okay (say a nice round number like 1/256 FP rate), you're still reducing the amount of "hard" hashes the attacker has to computer by a factor of that false positive rate.
Feathers defines legacy code as code without accompanying tests in "Working Effectively with Legacy Code". Even to the point where someone he knows said of a particular shop, "they're writing legacy code, man!"
we have very similar for joomla http://joomla30.webkul.com/image-modules/photobooth.html
This really shows how using technology can leapfrog very costly gradual infrastructure upgrades in terms of both time and cost. Amazing!

It does make we wonder though... Google Maps / Waze must get a decent amount of information from tax funded sources. Do they give back helpful information such as e.g. traffic flow/conditions in this example as well? Without having to participate in a special 'campaign'?
Same sentiment; I'm really wondering how they managed to find 60kft of gain in (at best) hilly Tennessee. Then again, if you find a steep enough hill and run up and down it enough times (which it sounds like they do), I guess that would do it.

While I've no doubt this is a very difficult challenge, it seems contrived, and the comparisons to things like Everest are flippant. For one thing, you don't have to contend with the extreme weather of Everest, or the lack of oxygen, which you won't even get anywhere near because you never actually get anywhere near 8kft in altitude. Cross country hiking through brush? Yeah, I can do that; I avoid it when possible because that's not my idea of a good time and there are more interesting challenges.
https://instagram.com/p/078SdFQ3hJ/?taken-by=marutaro
It is also the entire cause of the "gentrification" problem many are so pissed off about. Nobody wants to move into a poor area, they are forced into it because you can't build skyscraper high rises in the good areas.
Houzz releases HouzzLenz VR Goggles to visualize home remodeling.

https://www.youtube.com/watch?v=HYIKDcMwreY

http://www.houzz.com/ideabooks/46342399/list/houzzlenz-the-n...

"If you can swipe your face, you can update your place."
Also, references can't be nullptr, which eliminates needs for null checks and makes clear that nullptr isn't a valid value. RVO also makes "returning" values through non-const references not as necessary.

Though, the most important thing is consistency and readability over using fancy new features, so they should stick to the style they were using for the project.
That may be the meaning you are using, but that's not what the other commenters are doing.
If blogging were around ~100 years ago:

An abacus operator explains why it is impossible to automate calculations.

A buggy driver explains why it is impossible to automatically control horses.

etc.

I'm not equating being a pilot to one of the occupations above; but just saying that we have successfully automated a whole lot of things (think self-driving cars, for instance), and if the will was there, we could automate piloting too. A majority of the air accidents are caused by pilot error, so it's about time something was done about it.
A better argument for per-user, randomly-chosen-at-password-change-time salts is so that you can't determine that two users (currently or historically from a password history) are using the same password by comparing the hashes.

If you knew that a hash was used many times over in a system, then you'd try cracking that password first to get access to the most accounts.

With salting you don't get to prioritize, or compare to previous information trivially.
San Francisco - Ginger.io

Design, product and engineering roles at our downtown offices.

Ginger.io uses mobile phones and machine learning to predict behavioral health issues (depression and anxiety primarily) and intervene at the right time.

We just completed our series B, and have several product lines all showing tremendous promise.

Hiring INTERNS as well in all categories.

https://ginger.io/jobs/
Watch WWE WrestleMania 03-04-2015
Jobr - San Francisco, CA - FULLTIME

We're hiring:

- Web Developer (Ruby on Rails, Backbone.js, and golang).

- Data Science Lead (Technical Background)

Jobr is the leading mobile job finding app. It takes seconds to create a profile and we start recommending jobs for you based on your experience & education. As you start to swipe yes/no they improve. Our 3.0 update is currently featured in the app store and we're growing dramatically MoM. http://jobrapp.com

We're based on 2nd & Howard in a beautiful brick office. Scrappy, hardworking team. Extremely flat culture & data driven.

Connect with us by emailing: tj@jobrapp.com
DropForge Games - Seattle, WA
FULL TIME

We're looking for talented and experienced game developers to help us build our mobile games studio. We're a 30-person startup financially backed by Wargaming (World of Tanks) run by an experienced free-to-play executive team. We're building fun, innovative games for massive audiences on iOS and Android, and could use your help.

Jobs:

SENIOR SOFTWARE DEVELOPER
http://www.dropforge.com/job/sr-software-developer-iosandroi...

PROGRAMMER II
http://www.dropforge.com/job/programmer-ii/

GAME DESIGNER
http://www.dropforge.com/job/game-designer-2/

Feel free to contact us at jobs@dropforge.com // http://www.dropforge.com/jobs/
This is exactly what we're thinking! A little thingy that floats up and fades away. Almost like... points in a game. The only thing is we're thinking of doing it over the item, so you know that item has been added. Upper right corner, people's eyes may not see (though the movement will probably catch). Something to test!
TomTom – http://www.tomtom.com — London, UK – Mobile & Embedded Apps and DevOps roles (full time, on site, relocation available)

We're TomTom's navigation software team in London and we create the best on-the-road experiences for drivers and bikers everywhere.

The apps we make are built into Renault and Smart in-car systems, available for smartphones, and at the heart of TomTom's expanding range of consumer devices where hardware and software are conceived together. Like the just-released TomTom Rider made specially for bikers: http://tomtom.com/en_gb/drive/motorcycle/index.html

Developers who join our expert team are valued for their ideas as well as their skills, and we encourage both through regular hack days, plus training or conference attendance in areas that interest them.

-- Role: Mobile & Embedded Apps Developer

Our apps feature TomTom's signature design language and map-centric UI, optimised for use on the road. Working with TomTom's UX team, app development with us is a challenging mix of custom UI development and deep routing, guidance, traffic and search presentation smarts. If you join us you'll be developing with Java, C++, JavaScript, Android, iOS and Qt.

-- Role: DevOps for Mobile & Embedded

Building scaleable CI infrastructure for mobile & embedded app testing is hard, particularly when you add custom pre-release hardware and gigabytes of map data into the mix. If you join us you'll be working with Android and iOS SDK command line tools and device emulators, Jenkins, Git, Nexus, Gradle, Ruby, Docker and a mix of local device farms and cloud computing services.

-- To find out more check out either http://tomtom.jobs (search for "London") or if you're on LinkedIn https://www.linkedin.com/vsearch/j?keywords=tomtom+london
Some shops reject commits that are refactoring. "Deliver value, don't just goof off". :-)
It's sad because Minecraft was originally Java...
Snel 10 kilo afvallen met het beste eiwit dieet
Wow, no love for assembly/assembler yet? Enjoy:

Raytheon SI could be the place for you. We are hiring technical staff at all levels, from INTERN (hurry, the competition is fierce) to people with decades of experience. We hire doctorates (PhD), but don't actually require any degree at all. Desired skills relate to reverse engineering, disassembly, emulators, JIT, hypervisors, security vulnerability research, compilers, binary static analysis, formal methods, malware, hacking, boot loaders, x86, PowerPC/PPC, MIPS, ARM, IDA Pro, kernels, constraint solvers, drivers, and embedded systems.

SI is mainly in Florida (Indialantic), Maryland, Virginia, and Texas (Austin, San Antonio). It's a place with extreme flex time, T-shirts and jeans (or shorts even), normally 40-hour weeks with the option for paid overtime if you want it, your choice of desktop OS, real walls (most locations), and lots of mischievous bright nerds with maker attitude. We get you a security clearance, so US citizenship is required.

To apply, go to https://rtnsi.theresumator.com/ and select one of the following job titles:

* Software Engineer / CNO Developer
* Static Analysis Research Engineer
* Vulnerability Researcher / CNO Analyst

(note: the "Melbourne" location is actually Indialantic, where you can get a house within a mile of the beach for 5 figures)
I Followed My Stolen iPhone Across the World
Share underwear with the world - MeUndies introduces the #ReUndies program.

https://www.meundies.com/videos/reundies
Thanks! It's very far from perfect and we know, have some great ideas but man I will say, I never thought UX/UI would be so hard when I got started.

Lol at your PS, if we go there, promise to not tell you =)
That's a neat idea. What do you put in both? I see two options:

1) You copy the whole password, and use the whole password for both. Then an adversary can just attack the weaker, faster one.
2) You split the password; half goes in one and half in the other. Now user passwords have doubled in length---or they haven't, and you have 4-10 character half-passwords instead of 8-20 character passwords.
You mean, "created the World Wide Web".
Atlantis – Our First Underwater Datacenter – DigitalOcean
I have something really cool like this, but it's portable and it came with my phone and it was free.