I only skimmed the article, so maybe they said this, but for choosing from a small range, for example 0..51, you can get several of these from a 32 bit random number with this algorithm…
From personal experience, this is absolutely correct and still a major problem which needs solving. The nurses in hospital will keep a fluids-in fluids-out chart constantly logging their best estimates. Outside hospital…
This would be good to build into the windowing system so it could apply to any application. Split any application window horizontally or vertically and put the two parts where you like on the screen.
The .COM domain has always been international in nature, not a country domain restricted to the US. See the extract of RFC 1591 below. Or have I missed something? It is fairly clear that .US is for US companies, .COM is…
"The length of the randomly generated salt shall be at least 128 bits." nist-sp800-132.pdf http://csrc.nist.gov/publications/PubsSPs.html Not quite the same application, but it would seem best to take a conservative…
My theory is that un-released software is like physical inventory. Keeping inventory is very expensive because the money spent could have been earning interest elsewhere and product sitting in the warehouse becomes…
Maybe I did not phrase that well. What I was thinking was not to give your premium accounts away free, I agree that would devalue your product, but that you could get free advertising by posting details of your product…
Try to find places where there are people who would benefit from your product. Post free links to your site on non-spammy relevant places. If you get creative this should produce a nice set of inward links and a bit of…
No. The police possess a great deal of stolen property. The entire police force would collapse into a blue hole if they had to arrest everybody in possession of stolen property. The crime is knowing it is stolen and…
It's called traffic analysis https://secure.wikimedia.org/wikipedia/en/wiki/Traffic_analy...
That depends on how you define 'active'. A quick Google gives me some Facebook published statistics [1] which say that more than 250 million people log on every day. Goldman Sachs seem [2] to say "600 million+ monthly…
"In any case that value was unrealized assets, so it's not like they actually had $36B in cash" I could equally say that if they liquidated that $26B quickly they would get less than that. I would hope the $36B and $26B…
That is trivial compared to the $10,000 million the Harvard endowment fund lost. http://www.bloomberg.com/apps/news?pid=newsarchive&sid=a... http://www.nacubo.org/Documents/research/2009_NCSE_Public_Ta...
The things we should fear are myocardial infarction [1] and cerebrovascular accident [2]. These are what will probably kill us in developed countries [3]. The good news is that we know how to prevent many of these…
Yes, you are quite right. I should have done that.
Sorry, I misunderstood. I thought you were supporting a 'rage is sufficient reason to attack people' position. My counter-example was intended to show clearly that rage can be entirely unreasonable and inappropriate and…
"The harshness of the lesson was proportional to the amount of rage such behavior induce." Let's consider the logic of that statement by taking a different example. A young child is in a shop and is told by its parent…
The article does not make it clear that to make a submission to the review itself you should see this page http://www.ipo.gov.uk/ipreview/ipreview-c4e/ipreview-c4e-res... the survey they are asking you to complete is…
Please don't shout in uppercase in the titles. The guidelines are here: http://ycombinator.com/newsguidelines.html I realise the original article uses this title, but a little more peaceful when posted to HN would be…
It is very poor security to teach your users to enter their passwords on HTTP pages. Even the small minority of technical people who check the page uses HTTPS when it posts the form do not check it every time they use…
Why doesn't Data.PVector.map increment the last element from 14 to 15? ghci> adjust succ 2 a -- apply a function to a single element fromList [1,42,14] ghci> Data.PVector.map succ a -- apply a function to all…
"scientists, engineers and tech folk are able to abstract the description of a high-trauma event .. and describe it in such matter-of-fact terms." Here is John Hamilton who made that remark:…
You talk about password collisions. I am only considering salt collisions. Their system had many holes, one of which was the salt length. I did not mean that the salt length was the largest hole, nor that it was the one…
It is a salt collision not a hash collision. No, clearly one would not matter, hence staying below that would be entirely safe against a salt collision inside your database. But if it was feasible to store 10^32 rainbow…
It's called the Birthday Paradox https://secure.wikimedia.org/wikipedia/en/wiki/Birthday_para... the rule of thumb to remember is that there is a 50% chance of a collision when the sample size reaches half the bits of…
I only skimmed the article, so maybe they said this, but for choosing from a small range, for example 0..51, you can get several of these from a 32 bit random number with this algorithm…
From personal experience, this is absolutely correct and still a major problem which needs solving. The nurses in hospital will keep a fluids-in fluids-out chart constantly logging their best estimates. Outside hospital…
This would be good to build into the windowing system so it could apply to any application. Split any application window horizontally or vertically and put the two parts where you like on the screen.
The .COM domain has always been international in nature, not a country domain restricted to the US. See the extract of RFC 1591 below. Or have I missed something? It is fairly clear that .US is for US companies, .COM is…
"The length of the randomly generated salt shall be at least 128 bits." nist-sp800-132.pdf http://csrc.nist.gov/publications/PubsSPs.html Not quite the same application, but it would seem best to take a conservative…
My theory is that un-released software is like physical inventory. Keeping inventory is very expensive because the money spent could have been earning interest elsewhere and product sitting in the warehouse becomes…
Maybe I did not phrase that well. What I was thinking was not to give your premium accounts away free, I agree that would devalue your product, but that you could get free advertising by posting details of your product…
Try to find places where there are people who would benefit from your product. Post free links to your site on non-spammy relevant places. If you get creative this should produce a nice set of inward links and a bit of…
No. The police possess a great deal of stolen property. The entire police force would collapse into a blue hole if they had to arrest everybody in possession of stolen property. The crime is knowing it is stolen and…
It's called traffic analysis https://secure.wikimedia.org/wikipedia/en/wiki/Traffic_analy...
That depends on how you define 'active'. A quick Google gives me some Facebook published statistics [1] which say that more than 250 million people log on every day. Goldman Sachs seem [2] to say "600 million+ monthly…
"In any case that value was unrealized assets, so it's not like they actually had $36B in cash" I could equally say that if they liquidated that $26B quickly they would get less than that. I would hope the $36B and $26B…
That is trivial compared to the $10,000 million the Harvard endowment fund lost. http://www.bloomberg.com/apps/news?pid=newsarchive&sid=a... http://www.nacubo.org/Documents/research/2009_NCSE_Public_Ta...
The things we should fear are myocardial infarction [1] and cerebrovascular accident [2]. These are what will probably kill us in developed countries [3]. The good news is that we know how to prevent many of these…
Yes, you are quite right. I should have done that.
Sorry, I misunderstood. I thought you were supporting a 'rage is sufficient reason to attack people' position. My counter-example was intended to show clearly that rage can be entirely unreasonable and inappropriate and…
"The harshness of the lesson was proportional to the amount of rage such behavior induce." Let's consider the logic of that statement by taking a different example. A young child is in a shop and is told by its parent…
The article does not make it clear that to make a submission to the review itself you should see this page http://www.ipo.gov.uk/ipreview/ipreview-c4e/ipreview-c4e-res... the survey they are asking you to complete is…
Please don't shout in uppercase in the titles. The guidelines are here: http://ycombinator.com/newsguidelines.html I realise the original article uses this title, but a little more peaceful when posted to HN would be…
It is very poor security to teach your users to enter their passwords on HTTP pages. Even the small minority of technical people who check the page uses HTTPS when it posts the form do not check it every time they use…
Why doesn't Data.PVector.map increment the last element from 14 to 15? ghci> adjust succ 2 a -- apply a function to a single element fromList [1,42,14] ghci> Data.PVector.map succ a -- apply a function to all…
"scientists, engineers and tech folk are able to abstract the description of a high-trauma event .. and describe it in such matter-of-fact terms." Here is John Hamilton who made that remark:…
You talk about password collisions. I am only considering salt collisions. Their system had many holes, one of which was the salt length. I did not mean that the salt length was the largest hole, nor that it was the one…
It is a salt collision not a hash collision. No, clearly one would not matter, hence staying below that would be entirely safe against a salt collision inside your database. But if it was feasible to store 10^32 rainbow…
It's called the Birthday Paradox https://secure.wikimedia.org/wikipedia/en/wiki/Birthday_para... the rule of thumb to remember is that there is a 50% chance of a collision when the sample size reaches half the bits of…