HNHacker News
TopNewBestAskShowJobs

zaph0d

1,114 karma · joined November 26, 2008

Clojure hacker.

Co-founder & CTO at helpshift.com

b.ghose at helpshift.com

http://freegeek.in

submissionscomments
zaph0d··on Noir - The Clojure web framework
I am no crypto expert either, but here is your patch - https://github.com/ghoseb/noir/commit/f814ea9d1bc7470197eb73... (pull request already sent).

Noir looks very good. Keep up the good work and let me know if you need any help ;)

zaph0d··on Noir - The Clojure web framework
Hashing algorithms like SHA-256 have a very interesting property, they are designed to be extremely fast (even with large amounts of data). That lets you generate millions of hashes per second on any modern CPU (much faster with GPUs). Salting doesn't help much because if your DB is compromised, you are still open to brute force or dictionary attacks.

BCrypt is a very good algorithm for hashing passwords because it's very slow (compared to SHA-x) and thus are extremely time consuming for an attacker. BCrypt also allows to incorporate a "work-factor" which makes the hashing even slower; that allows us to choose a higher work factor when more powerful computers become commonplace.

There are a lot of articles online that discuss this subject.

zaph0d··on Noir - The Clojure web framework
Still some nits -

* SHA-x is not an "encryption" algorithm, it's merely a cryptographically secure, one-way hash. The function name and the documentation are thus misleading.

* You shouldn't use SHA-x or MD5, etc. for password hashing anyway, because they are just way too fast! You should use BCrypt for password hashing.

I can submit patches if you wish :)

zaph0d··on Interview with Hal Abelson on Code Quarterly
Apart from the great content, I love the typography on the pages. Simple yet elegant. Kudos!
zaph0d··on HN Meetup: New Delhi on Friday, June 10th
Infinitely Beta would be more than happy to be the host. More details on the post by `nunb`.

Feel free to email me. Info on my profile.

zaph0d··on HTC sides with consumers: No more locked bootloaders in Android phones
The OP was talking about bootloader unlock and not carrier unlock.
zaph0d··on Programming Contests, Algorithms, and the Real World Steven Skiena
Georges Harik FTW!
zaph0d··on Apple Inc. - Employee Purchase Program
I compared the prices of iPad2 and the education store has 0% discount on that. Whereas the link mentioned by OP has a USD 10 discount.
zaph0d··on India Graduates Millions, But Too Few Are Fit to Hire
Kudos to you. Very aptly put.
zaph0d··on Solarized - Color scheme for vim, mutt, terminal emulators
It's here - https://github.com/altercation/solarized/blob/master/xresour...
zaph0d··on JQuery noise generator
Interesting, we used an image to achieve the same effect on http://www.paisa.com/ -- this works across all browsers.
zaph0d··on Ask HN: Review UI of my app - Addpiks
Noisy.
zaph0d··on Clojure Conj 2011 Nov 10-12 in Durham, NC
No.
zaph0d··on Sold my dipshit company for $5m, where to invest?
Buy Facebook shares on SecondMarket.com.
zaph0d··on RStudio,a new IDE for R
Looks good, but it's crashing on my Mac OS X (Snow Leopard). Any idea how I can debug/fix this issue?
zaph0d··on Why Indian Startups need to get off their asses and learn to program
A two week trial is fine, but that still doesn't let non-technical people discover flaws in design/architecture/code.
zaph0d··on Why Indian Startups need to get off their asses and learn to program
Just to clarify, the article didn't indicate that the CEO/CFO/COO needs to learn programming to get off the ground. The non-technical founder can at the least onboard a technical co-founder or build an internal tech. team. If a non-tech. person outsources the product, how will he/she be able to figure out if the outsourcing firm is bluffing or creating bad products?
zaph0d··on Why Indian Startups need to get off their asses and learn to program
Well, since Infinitely Beta is _not_ an outsourcing shop, I don't think how a little bit of linking will affect its bottom-line :)
zaph0d··on Steve's story - Google employee #13
It was probably Jerry Barber. Cite: http://quoteinvestigator.com/2010/07/14/luck/
zaph0d··on Rich Hickey stops Clojure funding appeal from 2011 onwards
Please see my reply to grandparent.
zaph0d··on Rich Hickey stops Clojure funding appeal from 2011 onwards
The Jon Harrop who used to hang out on the Clojure list is not the same as Dr. John Harrop who used to advocate F#, OCaml, etc.

I asked him and he said "no relation".

zaph0d··on Rich Hickey stops Clojure funding appeal from 2011 onwards
FYI, Free Software Foundation has always required contributors to GNU projects to assign copyright to FSF. Back in the day, you needed to send it via snail mail, but now AFAIK, FSF sends the package to you which you have to sign and return (via snailmail). Cite - http://www.gnu.org/prep/maintain/html_node/Legal-Matters.htm... http://www.dreamsongs.com/IHE/IHE-110.html
zaph0d··on Rich Hickey stops Clojure funding appeal from 2011 onwards
Patches, bug reports are welcome :)
zaph0d··on Rich Hickey stops Clojure funding appeal from 2011 onwards
Apparently he likes Clojure - http://steve-yegge.blogspot.com/2010/07/blogger-finger.html
zaph0d··on Rich Hickey stops Clojure funding appeal from 2011 onwards
Possible reason behind the decision - http://news.ycombinator.net/item?id=2053908
zaph0d··on 1960s IT department
IMHO Roxanne & Helen were very beautiful.
zaph0d··on Apache loses Java showdown vote to Oracle
Thanks, but no thanks.
zaph0d··on Hammock-driven Development
No. They are going to be available gradually.
zaph0d··on Hammock-driven Development
I am so proud to proclaim that I was there at that talk in person, and I watched Rich inspire a whole generation of programmers with that talk.
zaph0d··on Ask HN: Having emotional breakdown
You have been to all the wrong networks and the wrong channels. You have no idea what kind of community IRC is.
← PreviousPage 3 of 7Next →