Hacker Newsnew | past | comments | ask | show | jobs | submit | djenryte's commentslogin

Wow, tried this out on a noodle pulling video I filmed in 2006 that went semi-viral over time ( http://www.youtube.com/watch?v=6rfu1ZHiMP8 ). In 3 mins, my campaign had 258 impressions and 112 views for a conversion rate of 43.41%. Exhausted my bid/cost per day at 12 cents/$10 a day using the coupon.


I think there was a heavy geographical element involved. All my programming friends from OC got in, some hitting the site as late as 7:04. Those in SF and LA were all locked out even after constant refreshes.


Found a Wikipedia article detailing Microsoft Online Services: http://en.wikipedia.org/wiki/Microsoft_Online_Services


This is pretty bad. I've received password reset emails from dreamhost in the past and the passwords are in plain text...I just renewed two days ago too.


Surely they don't send you your old password, but a freshly generated one? Then they could still be hashing them after emailing you.


Embarrassingly... no. Our login/authentication system was written in 1999, and it shows -- we store panel login passwords using symmetric encryption, and send out the decrypted password when you request it.

Getting this fixed was already on our to-do list. This incident has moved it up to near the top of the list (competing with a few other security-related tasks).


I have always been bothered about cpanel passwords coming through in plain text. To confirm, is this the same storage system with mail passwords also?

Shell passwords - they're hashed, but are they salted? If not, can they be in future?

Thanks for your time.


I've been happy with Dreamhost's service, but becoming aware of this in the last few months has forced me to look into other registrars. If this is fixed, I would be much more inclided to stay.

If you could forward these articles to whoever's working on security, I'd appreciate it (and they're a good read): http://www.codinghorror.com/blog/2007/09/rainbow-hash-cracki... http://chargen.matasano.com/chargen/2007/9/7/enough-with-the...


Hostgator does this too and don't reset, only resend passwords. It has always bugged me. There is no reason to be storing plain-text, especially for their billing system.

At least Dreamhost says the Shell passwords are hashed, which makes sense.

I didn't know that about the plain text dreamhost web-panel passwords though.


My name is Henry and I'm a recent SF transplant, looking for a full time developer job in San Francisco. Started my programming career in SoCal on the Microsoft C#/ASP.NET/SQL Server stack, but realize that's not too popular up here. Expertise in CRM(mainly Microsoft Dynamics but also Salesforce.com and Saleslogix). Started a CRM programming blog and fell into freelancing/consulting for a couple small businesses for ~2 years. Moving on and interested in and in the process of picking up Python, machine learning and iOS development. Submitted first iOS app to app store this past friday(in review).


I was walking home yesterday and saw a small sign denoting the Internet Archive building on Clement and Funston St. in Inner Richmond, SF. A bit surreal seeing the Archive of the Internet(!!) housed in white pillared building. And today, here it is on the fp of hn.

http://maps.google.com/maps?q=internet+archive&hl=en&...


It's a former Christian Science temple.


Insightful article. Happy for the repost. Missed this the first time around.


I found this article linked within on the cult-like hedge fund Bridgewater Associates that subscribes to "radical transparency," pretty interesting as well: http://nymag.com/news/business/wallstreet/ray-dalio-2011-4/

"Transcendental Meditation informed his belief that a person’s main obstacle to improvement was his own fragile ego; at his firm, he would make constant, unvarnished criticism the norm, until critiques weren’t taken personally and no one held back a good idea for fear of being wrong."


You might want to pick up the current issue of the New Yorker. It's got a lengthy profile of Ray Dalio and Bridgewater.


Unrelated, but I visited Luxembourg last year while backpacking in Europe. After fearfully walking a few blocks away from the train station full of very pushy homeless people I found sprawling bridges overlooking storybook castles and lush gardens! Beautiful country!

It might be hard to find non-remote devs with the exact knowledge you require as the population of Luxembourg is relatively small, no?


Nice to hear that you liked it here. Many people call Luxembourg the small switzerland. They also have plans to reorganize the main central station and to build a park on it. So in 5-10 years, it will look much nicer.

We don't require our applicants to be experts in these fields, but smart people willling to create things and to learn. We found quite a few good people during the last few months.

The plug and play center (from San Francisco) will also be opening its European offices here in the future, so there might be more competition for developers in the future, who knows.


If you're using Chrome or Firefox, there's a great extension called Autopager that retrieves the next web page in a sequence and loads it inline: https://chrome.google.com/webstore/detail/mmgagnmbebdebebbcl...

I discovered it a few months ago and can't imagine living without it anymore.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: