DanielStraight

If you're interested in guitar, it's worth looking at some music from West Africa. A lot of music from that region (at least a lot of what gets exported as "world music") relies heavily on guitar. Maybe the renaissance of the guitar just won't happen in the US / Western Europe.

https://www.youtube.com/watch?v=BvVe1iKltAw

https://www.youtube.com/watch?v=gINDDDo3do8

https://www.youtube.com/watch?v=TW1s84p17ec

https://www.youtube.com/watch?v=cimqPFZvo4c

https://www.youtube.com/watch?v=A7My5IpEzVM

https://www.youtube.com/watch?v=HhL_asWgVTg

https://www.youtube.com/watch?v=r4-uq8cTF7o

This is a clever idea. I really don't want this to come off as discouraging because I love stuff like this.

That said...

This shows the limitations of relying on orthography as a proxy for phonetics, especially in a language like English where the spelling is such a disaster.

In my mind, "eoptoesw" and "quwyh" are not pronounceable as English.

And is "twutinn" pronounced too-tin or am I supposed to pronounce the "w" somehow? And if I remember my password is too-tin, how do I know it wasn't spelled tootin or twotin or twotinn or tutinn or tutin or...

At the very least, you should consider which consonant clusters can occur at the beginning, middle and end of words. They can't all occur everywhere. Then I'd try to eliminate as many homophones as possible. That might get you a lot closer to truly pronounceable and non-ambiguous passwords.

Processing / p5.js?

https://processing.org/tutorials/gettingstarted/

http://p5js.org/get-started/

I don't know if anyone will read this at this point, but if you're going to proof-of-concept an exploit, please make that clear in the title or have an opt-in step with an explanation of what it will do like the EFF uses on https://panopticlick.eff.org/

I do not appreciate being tricked into running your exploit proof of concept, especially when you put content in it that I otherwise would not have clicked.

I'd suggest reading this line-by-line explanation of the MIT license: https://writing.kemitchell.com/2016/09/21/MIT-License-Line-b...

Once you understand why everything that's in a license is there, it's hard to imagine making it much shorter.

The Apache license does a good job of separating out the full text and a smaller boilerplate to put on each file, so that may be a good option.

Length does not trump complexity.

"Internationalization" is 20 letters long, but it will be cracked in seconds by even a moderately sophisticated attacker. (zxcvbn gives it guesses_log10 of 4.34708)

The only way to measure password strength is to estimate the number of guesses necessary to crack the password. That means figuring out how many possible passwords could have been chosen for whatever method you are using to pick your password. In the case of "SophisticatedpwsRock!!", the method is something like: common adjective with a common transformation (capitalization), relatively common abbreviation, common noun with a common transformation, common punctuation, common punctuation. The number of possible passwords using that pattern is what you should be interested in, because that is how the attacked is going to get your password, not by trying every possible combination of characters.

For a simple example, the passwords "i like salt" and "you like pepper" should be considered equally strong (or equally weak as the case may be) since they follow the same pattern for generation. Any system of determining password strength which gives them significantly different strengths is misleading. In this case, if we followed the method the author used, we would say "you like pepper" is 26^4 times stronger, which is absurd. (zxcvbn by comparison gives them both almost the same rating: guesses_log10 of approximately 8.)

You cannot take a password picked by one method (common words) and score based on another method (characters). Passwords are only as strong as the easiest possible way to guess them. If you generate 8 random characters and they happen to spell "password", your password is still weak because it can be guessed by a much easier method than going through every combination of 8 characters.

Find the easiest way to approach guessing a password and see how many tries it would take using that method. That will give you the strength of the password. Counting characters will not.

My point is that 72^8 and 72^22 is an invalid comparison to determine the relative strength of those passwords.

B5s9z-Qx is 72^8

SophisticatedpwsRock!! is something like number_of_common_words^2 + 26^3 + 10^2. In other words, two common words, three lowercase letters and two symbols.

You can put each of these passwords in Dropbox's zxcvbn (https://dl.dropboxusercontent.com/u/209/zxcvbn/test/index.ht...) to see this more clearly.

They give a guesses_log10 of 8 for "B5s9z-Qx" and 12.76155 for "SophisticatedpwsRock!!". In other words, the latter is stronger, but it's not 72^14 times stronger. That's where the article messes up.

An attacker isn't going to crack "SophisticatedpwsRock!!" by trying 72^22 options. Just like an attacker isn't going to crack "password" by trying 72^8 or even 26^8 options. They're going to try 1000 or so options of super common passwords for "password" and some combination of dictionary words, abbreviations, symbols, common transformations, etc for "SophisticatedpwsRock!!". This makes the search space much, MUCH smaller than 72^22.

Despite admitting that...

Attackers use programs that try all words in a password dictionary, which is typically just a file of commonly used words in a given written language. These programs will even use combinations of these words, and permutations based on common replacements of letters with numbers or symbols

The author then goes on to say...

Compare the password "B5s9z-Qx" with the password "SophisticatedpwsRock!!".... The first would be 72⁸, or 722,204,136,308,736 possible passwords. This would take a desktop PC roughly 3 days to crack. Compare that with our second password, which would be 72²² or 72,663,267,215,268,556,211,671,874,973,277,863,542,784, that’s a lot of possibilities.

This is a contradiction. A 10-letter word does not add as much entropy as 10 random characters. If you assume it does, you will cripple your security.

Do not follow this advice on passwords.

I obviously can't tell you how YC will respond to your video, but I find it very unlikely your accent is incomprehensible if your American cofounder said it was fine.

Here's an example from the site I linked before that I would consider completely comprehensible: http://dialectsarchive.com/russia-5

This, on the other hand, is probably pushing the limits the comprehensibility: http://dialectsarchive.com/russia-13

If you fall closer to the second example, then American English speakers may have trouble understanding you clearly, but if you fall closer to the first, then I can't see anyone having a legitimate problem understanding you.

But again, I'm just trying to address actual comprehensibility issues. I can't say whether YC will respond positively or negatively.

English is spoken by over a billion people. Many of those people, even ones who are native speakers, have accents that are nearly incomprehensible to American English speakers. There are even debates about whether some dialects of English are actually separate languages at this point.

See: https://en.wikipedia.org/wiki/List_of_dialects_of_the_Englis...

See also: http://dialectsarchive.com/

It's completely unrealistic in today's global world to expect everyone to speak with the same accent.

Talk.

Put simply: It matters because taste is not the only criteria used to select which seafood to buy.

One might make a choice based on mercury content, environmental friendliness, dietary restrictions (medical or philosophical), to support (or abstain from supporting) a particular industry, or something else entirely.

To allow fraud which can't be detected on the palate is to deny buyers their freedom to choose based on any criteria other than taste.

It is not up to the producer what criteria buyers use when choosing their purchases.

Also, if the consumer shouldn't care, the producer shouldn't either. If the producer thinks it shouldn't matter what it says on the label, well then... no harm in putting the right thing on the label, right? No? I guess it matters then.

Why land? Fuel makes up a very small percent of the launch cost of a rocket. Landing also allows a much better experience for cargo and crew return, and it makes it possible to bring equipment to other planets or moons.

Why vertical? Vertical landing is much more flexible. You can land on a barge at sea. You can land on the launchpad itself. You can land on a planet or moon with no atmosphere.

https://en.wikipedia.org/wiki/Center_pivot_irrigation

They tell you why they were made:

"NASA originally commissioned these posters for an exhibit at the Kennedy Space Center Visitor's Complex in 2009. As part of our Journey to Mars, these versions are now available to everyone online."

They're just freeing up the design of their decorations in case other people like them and want to use them.

Succinct, statically-typed, functional, web-friendly languages are not especially common.

Maybe C#, Scala, or TypeScript.

Note as well that Java 8 is a lot better for succinctness and functional programming than previous versions were.

Unsurprisingly, their FAQ covers this:

https://www.producthunt.com/faq#my-product-was-submitted-by-...

Please try to find an answer yourself before asking for help.

If you think you are being scammed regarding a Pebble product purchased through Kickstarter, you should be contacting Pebble and Kickstarter.

It goes without saying that you should never provide credit card information of an unsecured connection.

This seems to disproportionately generate languages where all syllables start and end in a consonant.

Example: lium / les / seap / lim / mus / mis / sus / nus / suis / san / sois / taum / puos / sais / mip / soup / lis / neuk / soes / nal / sis / sit / piom / puot / saos / luk

This is rather unnatural, even in consonant heavy languages like the Slavic languages. See: http://www.personal.ceu.hu/students/97/Roman_Zakharii/polski...

Don't read this as disappointment though. This is really cool! Just wanted to point out this quirk.

Bing actually does this already. Not perfectly, of course, but there is precedent to be aware of. (You may have to turn on their Maps Preview version. Then just search for directions and click the food icon for restaurants along the way.)

It's off-topic.

https://news.ycombinator.com/newsguidelines.html

"Off-Topic: Most stories about politics, or crime, or sports, unless they're evidence of some interesting new phenomenon. Videos of pratfalls or disasters, or cute animal pictures. If they'd cover it on TV news, it's probably off-topic."

Because it's off-topic.

Just because something is important doesn't mean it belongs on this site.

When something gets flagged, it doesn't mean it was bad, it just means it doesn't belong here.

For example, if I’m in the mood to think about shapes— and I often am— I might imagine a triangle inside a rectangular box. I wonder how much of the box the triangle takes up? Two-thirds maybe? The important thing to understand is that I’m not talking about this drawing of a triangle in a box. Nor am I talking about some metal triangle forming part of a girder system for a bridge. There’s no ulterior practical purpose here. I’m just playing. That’s what math is— wondering, playing, amusing yourself with your imagination.

http://mysite.science.uottawa.ca/mnewman/LockhartsLament.pdf

Can you explain a little more about what you're trying to simulate and why you chose the model that you did?

Also... did you consider using known sound change processes? https://en.wikipedia.org/wiki/Sound_change

Indeed.

And if you see something getting flagged off the site, it's generally because users don't want it here, not because it's getting removed from on high by the mods.

Should I be able to see the unvote link on older votes or is it only available for a limited time or only on stuff voted on from now on?

If you go to your profile, you can turn on "showdead" which will let you see submissions and comments that have been killed by flags. Since your other submissions was to a YouTube video which is no longer available on YouTube, I'm not surprised it got flagged off the site.

I would also caution that "cute" is very, very unlikely to appeal to this site. I would expect most "cute" submissions to be flagged off the site.

The guidelines suggest what you should submit: https://news.ycombinator.com/newsguidelines.html

Relevant to your question: "Anything that good hackers would find interesting. That includes more than hacking and startups. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual curiosity."

To see your old posts, click "Threads" in the menu at the top.

Original article:

http://us-climate.blogspot.com/2015/10/70f-road-trip.html

Looks like with their lowest tier bare metal server + 450 GB additional storage the total would be 11.99 Euros per month or $13.28 USD. And there wouldn't be transfer cost between server / storage.

Since the OP indicated elsewhere that the storage need not be local on the machine, Backblaze is almost certainly the best answer.

500 GB of Backblaze B2 storage is $2.50 / month

Pair that with a $5 DigitalOcean droplet and the need is met for a grand total of $7.50 / month.