HNHacker News
TopNewBestAskShowJobs

ohgodthecat

147 karma · joined December 27, 2011

Slowbanned, Hellbanned
submissionscomments
ohgodthecat··on Ask HN: Would salted passwords have helped LinkedIn? Should we still use them?
I believe that the salt is able to prevent rainbow tables because of storage capacity, as rainbow tables are quite large.

That makes the pre-generation of these rainbow tables quite impossible, especially with how long many salts are.

Now of course you can start generation when you have the salt but that doesn't really make any difference between just cracking the passwords as you go.

Whether or not it would have helped LinkedIN I can't really say but it probably would have been a bit better as people woulnd't have been able to compare the list to known passwords as quickly (but probably not much of a difference there if they knew the salt).

ohgodthecat··on Lessons learned from cracking 2 million LinkedIn passwords
I see xkcd's passphrase is correcthorsebatterystaple and think that it is the wrong way to do it.

The memorization of that password would work much better than a simple passphrase like that.

I.E. the actual password would be:

    "That's a battery staple. Correct!"
And I don't believe that people will easily be able to crack that even with the minimal randomness that has been put in with current techniques. Sure if natural language cracking becomes popular you may have to become a little more creative like using a made up word or name or a number but even your example if no one knows what your password is:

    "My Phone number is (123) 546-8794."
should be sufficient for a very hard to crack password. And again is many times better than a simple dictionary passphrase with a few words combined.
ohgodthecat··on Firefox 13 Released - Homepage + Speed Improvements
You don't have to go into about:config to disable it all you have to do is click the little 9 boxes in the upper right of the newtab page.
ohgodthecat··on Mathics - A free, light-weight alternative to Mathematica with support for Sage
They did try to solve that with the Home edition version, it is a bit more than 2x more expensive than the student version but it does solve running mathematica for cheaper as long as you aren't using it for work.
ohgodthecat··on Mathics - A free, light-weight alternative to Mathematica with support for Sage
Why do you avoid it, because it is proprietary?

Because mathematica is actually really a pretty great math program.

ohgodthecat··on The Critical Security Flaws that Resulted in Last Friday's Hack
That seems kind of shady, I mean sure it sucks that it happens and it is kind of bad to have it as your top post but publishing just because you don't want it to be the latest post kinda downplays the publicity factor of being honest about what happened.
ohgodthecat··on Mathics - A free, light-weight alternative to Mathematica with support for Sage
If you can use python libraries there are a few libraries which allow you to use R functions through python, so that may be an option.

Edit:

Here they are:

http://rpy.sourceforge.net/rpy2.html http://rpy.sourceforge.net/rpy.html

ohgodthecat··on What happens when you ask your users about Cyborgs?
He describes his pacemaker here: http://news.ycombinator.com/item?id=3735443
ohgodthecat··on Show HN: Tyba - Personal Websites for Students & Young Professionals
I think the masonry style (like pinterest) layout is the wrong way to do something like this.

You want a CV kind of website to be easy to follow these just seem all over the place.

ohgodthecat··on CloudFlare To Launch Service For Sites Dealing With Tortuous EU Cookie Law
Well third party javascript makes a lot of people money how do you propose we get around their buying power?

Also what would the limits be of third party javascript be? Would it be allowed on the domain level so people could still use CDN's and other things easily such as cdn1.example.com, etc... if so It probably could be okay then people could use CNAME or A records to link to their legitimate third party javascript like analytics and ads and it could take away a lot of the possibility of malicious third party javascript.

The web however would probably have to change a bit because a lot of websites use third party javascript depending on your definition of it such as google's 1e100 domain and other such cdn measures that aren't necessarily served from a domain record.

ohgodthecat··on Is there a modern browser that runs on Windows 3.1?
Well then you get other problems such as dirty oil (unless you have a good seal). The biggest problem I see is that it lasts as long as the shortest lifespan of all the components then you get to go through buying a new one or the mess of replacing that part.
ohgodthecat··on The bad case of Hacker News authentication usability design
It does support https, such as if you use https-everywhere which now works on chrome.
ohgodthecat··on Ask HN: Where to buy men's suits?
I don't know of any particularly good places but be sure to take it to a tailor and get it fitted for the extra 50-100 dollars. (If they don't have a tailor in the store)
ohgodthecat··on The new Git-scm.com
No your parent is right, font replacement on windows still looks bad most of the time. Larger font sizes look a little less bad but there still exist rendering issues especially in chrome.
ohgodthecat··on Just My Type
People use things like typekit and fontdeck because it is cheaper than buying the actual fonts and they also provide highly available hosting for decent pricing.

If you want to serve them yourself and pay a one time fee you actually can do that with most of the typekit fonts but the fee is actually much more substantial than the yearly fee for those services.

ohgodthecat··on Introducing Google Drive... yes, really
I use and pay for spideroak I just wish your client was a bit better. Hopefully you guys are working on it still.
ohgodthecat··on Goodbye Yahoo, Hello Bootstrap and Backbone.
Though I don't use their site I think https://kippt.com/ did a pretty good job at making bootstrap their own (though you can't really tell the good ones are done in bootstrap)
ohgodthecat··on AOL Sells 800 Patents For $1 Billion To Microsoft
Sometimes you get a percent of profit for the patented applications but it is usually a lower percent (think 1-7%) and I don't know how it would factor in a sale like this.

This is more for non-software patents though

ohgodthecat··on Unix-like operating system for the TI-89 and TI-92+ graphing calculators.
At least integration is easy to do on the 89, I wasn't taught it and had to figure out how to do integration for the calculator section of one of the AP exams (BC or AB) on a ti 86 as our teacher did not teach us how to use our calculators at all.
ohgodthecat··on Should I learn Python, Perl or Ruby?
Pick Python or Ruby and just go with it they both are pretty similar.

Perl is fine too but python and ruby are going to be a bit easier to do webby things with them (in regards to getting started).

ohgodthecat··on Finally a unified Python solution for OAuth 1.0/a, 2.0 (oh and Ofly) consumers
Relevant: https://xkcd.com/927/
ohgodthecat··on Announcing Backlift: Deployment and Hosting for Backbone.js
It is just a bone, you can see the same thing on plenty of other fossils, maybe you just have a dirty mind? :)
ohgodthecat··on Notepad++ 6.0 Released
I believe it is just a nag window that pops up on file save sometimes. I used it for about 4 months before buying with no other interference.
ohgodthecat··on Show HN: KytePhone turns any Android into a kids-friendly phone
I can see the reasoning for this but I cannot see the reasoning for giving older people (who have trouble with technology) smart phones.

The best option I could possibly think of for an old person that can't grasp the concept is something like Siri for sending/receiving text messages (though I haven't used it so I have no idea what the learning curve is). Otherwise just give them a phone that acts like a phone.

ohgodthecat··on Rails is just an API
Seems to be a product of the platform http://svbtle.com/
ohgodthecat··on Body Hacking: Thoughts Regarding My Magnet Implant
Thanks for that it was really a much better story than a magnetic implant which comes off as silly to me.

If you ever write up more I sure would be interested.

ohgodthecat··on Why AirPlay just wrecked your responsive media strategy
I think a better explanation would be that they used the same video decoding for all devices and tried to implement a UI for that rather than re-encoding their entire library.
ohgodthecat··on Ask HN: Code Rails in the browser?
Maybe this: https://kodingen.com/

I have no experience with it though.

ohgodthecat··on ExportMyPosts.com - Backup Your Posterous Blog Data in One Click
Why do you need one for scriptogr.am? don't you already have the source in your dropbox with that?

Edit: Sorry misread the to scriptogr.am

ohgodthecat··on Kevin Rose Will Join Google
More of a PR move in that google is trying to get Kevin Rose fans (or whatever you want to call them) in the deal.

If Rose goes into google+ maybe Google wants him as a focus point or part of a public image... these are what I see Kevin Rose as with this but I of course may be wrong.

I don't know however how you got "anyone that hasn't heard of Google has heard of Kevin Rose" from my statement however.

Page 1 of 3Next →