michaelfairley

Ultimately, OP's strategy is just increasing the cost of brute forcing. Why not use the cost increasing features built into the hashing algorithms themselves?

_Nobody_ is hashing thousands of passwords per second as part of a typical webapp load. Even if somebody was, they would need only ~50 cores for hashing. I'm sure anybody with that much traffic could easily shell out a few thousand bucks for the extra processors without blinking.

Also, an 8 character password hashed with scrypt with a very low (64ms) cost takes on average $4.8 million to brute force[1].

1: http://www.tarsnap.com/scrypt/scrypt.pdf

Or just use bcrypt/scrypt/PBKDF2 in the typical manner. You're much more likely to screw yourself by mis-implementing this than you are to actually gain any real security benefit from it.

It's now yellow with this: "9:27 PM PDT We continue to investigate this issue. We can confirm that there is both impact to volumes and instances in a single AZ in US-EAST-1 Region. We are also experiencing increased error rates and latencies on the EC2 APIs in the US-EAST-1 Region."

AWS has been historically bad at reporting the severity of their outages promptly.

Definitely an EBS issue. Our (EBS backed, Heroku hosted) DB was returning queries more and more slowly leading up to the outage.

The circle is green with a little "note" on it.

"8:50 PM PDT We are investigating degraded performance for some volumes in a single AZ in the us-east-1 region."

EBS is a deep, dark black magic that time has shown doesn't actually work.

FYI: Your 1b is not the same as other people's 1b: http://aws.amazon.com/ec2/faqs/#How_can_I_make_sure_that_I_a...

Various software used to hardcode 1a, so 1a received disproportionate load. Now, everyone's a-e is randomized among the "true" a-e, meaning that even if everyone hardcodes 1a, the load will still be evenly distributed.

This is a more widespread EC2/EBS issue: http://status.aws.amazon.com/

The AWS status page[1] is showing problems for EC2 East as of a few minutes ago. This <strike>might be</strike> is a more widespread issue.

EDIT: Various non-Heroku EC2-East-based sites (e.g. Quora) seem to be down as well, lending more evidence to this being an EC2/EBS outage.

1: http://status.aws.amazon.com/

I've stopped updating it. It's at least a year stale.

Heroku is $15 for 20GB.

There are also threads, which are typically much easier to program for than an asynchronous system, but will still let you have more than 1 request per process.

There's a similar list at http://bestintrobook.com/all that includes most of the same, as well as introductory books for less academic topics.

Pygments (http://pygments.org/) will also turn code into syntax highlighted HTML.

When someone says "I learned how to ride a bike over the weekend", the response is never "I don't see you doing tricks in a half-pipe, so you really only 'learned how to pedal down the street'. Don't call that learning how to ride a bike."

If "knowing how to code" means that you've built webapps, databases, embedded systems, mobile apps, operating systems, console games, and a compiler and mastered 19 programming languages, then very, very few people in world are coders.

Hacker News, stop being pedantic downers, and instead applaud someone for picking up a new skill in life (and trying to help others learn as well).

Also doable without rails:

  # In config.ru
  # App, V0, and Resque::Server are each sinatra apps
  run Rack::URLMap.new({
    "/"       => App.new,
    "/v0"     => V0.new,
    "/resque" => Resque::Server.new,
  })

Zuck has talked about this publicly: He foresees Facebook.com fading, and Facebook's social graph to the be the thing that powers every quasi-social activity on the internet.

Be careful with storing stuff only on CDs. CDs (especially consumer CD-Rs) don't last forever.

http://en.wikipedia.org/wiki/Disc_rot

http://assets.1000memories.com/blog_posts/iphone4s_1.JPG was taken with our app. Not a gimmick.

Almost all of the photos we (1000memories employees) upload to our site are through the iPhone app, and we're more than pleased with the results.

If iterated SHA1 and bcrypt are (all other things equal) equally secure, but you're more likely to mess up while implementing your own iterated SHA1, then bcrypt is more secure.

Why pass up an incredibly well testsed tool that will hands down be more secure than anything you can write on your own?

I've had no problem running my hobby on projects on Heroku for free. What about it has been prohibitively expensive for you?

Unfortunately, python doesn't let you serialize a function through pickle or other non-marshal serializations. The only cross-python solution is to actually have python read the source code and send it (rather than the bytecode) over the wire, which seems much more brittle to me.

See http://stackoverflow.com/questions/1253528/is-there-an-easy-...

There's an option in your Spotify preferences to disable it.

That's actually why the sensor is in there in the first place: to let the hard disk shut off if it detects that the laptop is falling.

There are some security and privacy issues with that extension. It requires permission to run javascript in the context of every page, so the author could auto-update the plugin to inject malicious code in your banking session.

It also sends every url you visit to HNSearch, which a lot of people were unhappy with from a privacy perspective. My extension sends MD5(url), which makes it nearly impossible for me to track someones browsing behavior.

Edit: This is not actually true. I stand corrected.

The Kayak number doesn't include fees and taxes, whereas the Hipmunk number does.