jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
The main thing to remember about the deadline today is that what's changed is the forms needed for certification. If you're already certified, nothing changes today - but when you do your annual re-certification, you'll need to use the 3.0 forms (and not the 2.0 ones). Until such point, you're still certified and compliant. If you're not yet already certified, you'll need to use the 3.0 forms; this is what most people are referring to.

With that in mind, this discussion only applies (right now) to sites who have never yet filled out a PCI form. For sites which have, it only applies when their annual re-certification comes up.

So for those sites which have to certify against 3.0, can they run on a PAAS and take payments? It depends, specifically on how the credit card number is entered. The general rule of thumb is that if the form in which the number is entered is delivered by the host (the PAAS), you'll have to use SAQ A-EP (which is extensive, and you don't want). if the form is delivered by the vendor (like Stripe) and injected into the page, you can still use SAQ A (which is small, and what you want).

How about Stripe? I'm not sure if they've released a PCI 3.0 version of Stripe.js yet, although they clearly will. Likewise, I'm not sure about the others, but I think it's safe to assume that they'll release versions similarly (the techniques to do this are well-known).

Lastly, I'm not a QSA, and this isn't advice.
On the one hand, I'd be putting him out of business (and I'm well poised to scoop up those new prospects)

This is hyperbole. His customers are probably running their business, not monitoring the news for info on every SaaS they use. PCI compliance most likely isn't what keeps them there: it's friction in leaving, customer service, possibly features they don't find elsewhere. There isn't some PCI police that has a list of all their customers and will email them.

If customers are lost, it'll be a trickle. Once they identify what's up, they'll be all hands on deck to fix it, and this amazing competitive advantage you feel fell into your lap will disappear. On the other hand, maybe he'll ignore it - I promise you there will be customers that really don't care. Yeah, they should. But they won't. Your competitor will still be in business

I'd turn it into a marketing advantage, not treat it like a magic torpedo. Many of our competitors outsource their programming or are resellers of one of our competitor's services. (In our industry, whoever has your data has a list of your customers, so important to control who has access to that information) In our pitch, I tell them to ask whoever they do business with, even if it isn't us, if they outsource their operation and who controls the data. In your situation, point out that some companies in your space, without naming names, store their payment data incorrectly, and why that's bad. Then hit them with how you are PCI compliant.

Another thing to consider: if your magic torpedo scenario doesn't play out, then what? There's people out there using a provider that stores payment details insecurely. Announce it publicly, and you've just made them a target for a breach - big payday for those hackers. Muahahahah, I've killed my competitor! Maybe, maybe not, but you've also just screwed over those customers. Even if they leave that provider, when they find out the reason their credit card is being abused is due to your disclosure, there's 0 chance you'll their business, and it could have long term PR repercussions. Hell, depending on your jurisdiction, potential legal ones.

(Yes, everyone will say it's not altron's fault - it's his competitor's. It's both at that point. If I tell the world about someone I don't like who leaves their house unlocked, I'm an asshole, and don't deserve to be liked)

About the only situation where I feel this works out well for you is to contact the customers of theirs that you know, and tell them directly.
One nice side-effect of this is that now you can use languages like Brainfuck etc, which have no easy way to access toolkits, to write GUI applications
This submission should be labeled (2007).

Or better, bury the article in an unmarked grave and never see it again. Few people have done more harm to hiring in the industry than Atwood and Spolsky.
Im not sure this (executions and sovereignty) is accurate. Can you go into more detail?

If you're talking about the Inquisition, then the church did not have sovereignty.
Is it ironic?

I didn't see particularly stellar customer support on the page (not malicious, just a misunderstanding)
What you're saying is technically correct, but misses the point. I also find it useful to draw lines-and-boxes sometimes, but it's much faster and more creative if you don't constrain yourself to a standard like UML. The only reason to use UML in this case is if you intend to use your diagrams as a communication tool rather than just a thinking tool.

But, as a single founder, you should have no need to communicate the kind of information conveyed by a UML diagram. If you require that much hand-holding, you're not ready to be a single founder. Time is a very limited resource for a single founder, and if you're spending time discussing UML diagrams, where are you going to find time to talk to customers, create a good marketing pitch, and all the other things required to create a profitable company?
It's Microsoft that added a security hole to their product and hoped nobody would notice

This excerpt contains no content except a decades-old rant against how Microsoft doesn't care about security. I mean, really?

It's unfortunate people still believe that Microsoft would add a security hole to their product and hope no one figured it out so they don't have to fix it.
I'll try and make it, the wonders of modern transport mean I can just about do an evening in London.

But if it happens again: any chance of doing a weekend, or Friday night? :)
This might be a good place to start: http://rethink.unspace.ca/2010/5/14/raising-capital
Depends on the kind of slavery. Slavery has been a fixture of most economies, with the degree of force and inflexibility variable across societies. In one phase of the Ottoman Empire, slaves could own land and armies... but were still slaves. Likewise, dalits and buraku can become very wealthy because they're doing work that no one wants to do, but their status as low-class individuals persists. Some variants of slavery (such as modern sex slavery and early American racial/hereditary slavery) are brutal and horrible; others have been more benign.

The state of the American proletariat is not quite slavery, but it's getting there. It's a state of diminishing leverage that, uncorrected, will lead to a slave economy. In first-world countries like the EU and Canada, it's unimaginable that someone would lose everything because of a health problem. Now, if you want to avoid (err, make less probable) this fate, you have to get a job that provides health insurance. (Don't even get me started on the terrorist attack we call the individual health insurance market.)
"Wage slavery" specifically refers to wage laborers who are unable to do those things.

If you have the ability to find other jobs, go on holiday, join the army etc, you are by definition not a "wage slave," merely a wage laborer.
My experience is that they're all easily gamed if you want to.

As an example, I once spent a year browsing with the Alexa toolbar, and it boosted every one of my sites up into the top 100k just from my own traffic. After ditching the toolbar, they all dropped back down.

As to accuracy, Compete isn't even on the right order of magnitude for any of my sites. It's way over for one, way under for another. Just no correlation to reality.
www.startupnorth.ca
Good (that it was removed)
Let's clarify terminology first - I shouldn't have used the word "autoding" because it's slang and its use in another message board that I visit may not be universally accepted. I meant "an automatic disqualifier" - a condition that would completely negate any positive aspects.

Under that definition, I don't see any way to construe my earlier remarks as meaning that I would such a high importance on spelling of variable names.
The whole argument of "you can use the browser" has always been a straw man that falls apart when exposed to even the least bit of scrutiny. You can't access much of the hardware via the browser (no audio, camera, etc...) You can't charge for a browser app. You can't play video with any kind of content restrictions (which Flash video offers). And so on. The whole line of reasoning is ridiculous.

I won't say this article is inappropriate for HN but I think it's unworthy of HN.
Er, probably. Brain fried, too much multi-tasking. Sorry.
I honestly think they just couldn't make the pc fast enough to be able To handle VR. I bought a top of the line pc and video card for my dk2 and I still can't play half of the games because of judder. (Most dk2'rs will pretend this issue doesn't exist.)

There's probably just too much legacy technology on the pc to make it work plus all the latency of driving the display. A self contained mobile solution that can be qa'd at the factory may be the only way to go.
I suppose that's not a terrible metric in theory, but by that token the people who make mistakes are, in the general case, still taking more credit since they are also are paid to fix the problems.
I can't help your moral quandary, but the rationalization should really go both ways in that both technologies give the populous some measure of control against a possibly oppressive government (be it minuscule and ineffective or not). The right to bear arms in the constitution wasn't written for hunters-- it was written as another check and balance for the government.
This discussion is just going around in circles with nobody adding real useful commentary to the discussion other than "I perceive Apple's software quality to be worse based on my own anecdotal experience." This opinion is being perpetuated by a few people and it's just going everywhere.

I don't think the software quality dropped, it's all about perception. Just a few years ago, everyone was moaning about software quality with Lion but nobody remembers that now, because bad headlines are easier to create than good ones. Yosemite has some bugs, yes, but so do almost every other major releases of Operating Systems.

Apple does have some bugs to iron out, but in six month's time when they're fixed, everyone will forget and start complaining about something else. Perhaps a few happened around the same time, but that's no indication that things are getting worse. People just like to complain.

Those who want to experience a lower "functional high ground" should switch to Ubuntu and discover how much further ahead OS X is.

To the everyday user, there is no drop in software quality. They wouldn't have even noticed unless articles like this continued to circulate. People are just noisier these days.
That's good to hear. I definitely had a lot of initial irritation with my iPhone that the only box it could stream to was another Apple product (at the time).
maybe squid hunting? judging by the lights...
This is so frustrating, just got the email from Azlo today, prompted to check by this comment. No messaging on the site on login, nothing. Goodness.
All current US subs.

The last diesel class was the 3x 1950s Barbels, decommissioned by 1990: https://en.m.wikipedia.org/wiki/Barbel-class_submarine
Better donate to Matrix.org.
I'm not a bitcoin fan, but every bitcoin bubble for the last 10 years has people saying "lol, tulips". When it popped to $1: tulips. When it popped to $100... tulips! Then $2000... TULIPS! Then $20000, then $40000... TULIPSSSS!
It is not easy to join an open source project these days because usually the code base is convoluted and trying to fix issues requires a ton of context.

It's like the difference between writing your first sentence in English and writing a screenplay.
an operating system comprises more than just a kernel.
Since most mask studies are done in high/extended exposure environments like hospitals, they are not the best model for most people’s use.

This summer, the state of Kansas did an (inadvertent) infield experiment where some counties implemented mask mandates and other counties did not. After a few week, the non-mask mandate counties infection rates increased rapidly. The mask mandate counties’ infection rate increased on slightly.
This might be impressive for that person's business but I don't think there's nothing that technically exciting about this. 100k/month is one page view every 25sec average.
To me the case described in the article is actually one of the rarer uses of interfaces: you're the only one using a handful of methods from a single class which has many more.

If you're using all/most methods of the class, you'd be better off if the interface was defined directly by the class.

If there are many different users of the same subset of methods, it's better if the class designer declares that interface.

If there are multiple classes implementing the same interface, it's almost crucial that the implementers agree on and define the interface.

So I would say, the statement should be 'in general, interfaces belong in the package that implements value of the interface type; but don't forget that sometimes they can be declared by the code that uses them'.
Providing an obvious choice is helpful to beginners, otherwise every single person has to ask "what do I learn?" and spend a long time hemming and hawing about the choice, without the benefit of background knowledge
Very difficult with a touchpad. I couldn't hit anything! That's why I have a separate keyboard and mouse for gaming on my MBP.
A lot of them come from published academic research, but some of them come from our own empirical studies.
Apparently someone spied[1] the new Ford CUV/wagon with a dash-wide display as well.

I prefer the old analog gauges and knobs. Touchscreens are gaudy.

[1] https://www.motortrend.com/news/2022-ford-fusion-active-cuv-...
And how is your computer from more than 26 years ago still connecting to the internet? Via dial up?
The mainstream and most-politically-accepted economics of the day in western countries is state-capitalism (the levels of state vs capitalism is debatable in various countries and is obviously never stable). I think this is what the standard downside of that economic system looks like in practice... plenty of regulatory capture + moral hazards due to low punishments when 'caught' + little if any competition.

Like most things in economics the best route is looking for the least-bad option. We will find out over time if the state-capitalism balancing act really is the best, assuming there are any realistic alternatives and/or the scales/ratios of state vs capitalism are meaningfully measurable.

This experiment is only decades old in the modern technological era and one could argue it has only really peaked in the last two decades, with ever more industries getting merged to this day (which Corona will accelerate no doubt, just like 9/11 did with the US defense industry).

The state/nationalism part of this means these potentially poorly run companies could stay propped up for decades, despite the industry's potential in other forms.

I recently spent time reading about some chartered airline companies from the 70/80s and their stories is probably the best example of this sort of slow march towards industry conglomeration, with plenty of state involvement and protection. It probably provides a good timeline to base this stuff on and at a minimum plenty of analogies.

One example (see History): https://en.wikipedia.org/wiki/TUI_Airways
They murdered a police officer.

https://www.cnn.com/2021/01/07/politics/capitol-police-offic...

If you make this comment again, keep in mind that 5 people died as a result of their actions.
The real reason that no one ever goes after an exiting president is because there is an unspoken agreement not to.

The moment that the incoming party mounts a legal case against an exiting president, they ensure that the other team will do the same to them.

Also, all other members of congress would become targets. So many of them are enriching themselves through their office that it's best for everyone to just look the other way and move on for the sake of "bringing the nation together."

Edit to add: Imagine the indecisiveness that would be brought to the topic of war. Values are constantly changing. What if in 20 years, your extremely popular decision to invade a country for "democracy" is seen as being built on lies? Many of the wars we enter are unpopular when viewed years on.

Some might consider this a feature, as it may reduce war. But what about that critical moment when you believe war is necessary and justified because a dictator is taking over half a continent? I despise violence, but wouldn't want a leader afraid to step up before a situation is potentially too late for fear of doing time.
The Constitution defines treason very narrowly and I think it's unlikely prosecutors would choose that particular charge.
I wonder if it correlates to Joe Rogan's fixation on Vitamin D
A cool project that responds to or takes account of this (trying to make a storage artifact that someone plausibly could learn to use without most of our technological knowledge) is https://rosettaproject.org/. It's a somewhat high-density archival storage medium that tries to give a clear hint of what it contains and how to read it, just requiring optical magnification.

Of course, that means its overall capacity is many orders of magnitude less than the hard drive you describe.
In the US, you can buy medical insurance from the same mega corps that offer it through Fortune 500 companies... its just not subsidized by your employer so you pay larger premiums.
Go look at Gab, it's not what it used to be.

When it was full of Nazis the place was intolerable because they harassed everyone that wasn't extreme. I never stuck around for that because the user experience was very poor. Those guys were assholes.

It's pretty tame right now by Gab standards. The influx of people after Parler was kicked off AWS really calmed the place down.

I haven't seen a Nazi since I signed up again a few months ago. There's even routinely people going around telling the open racists to stop being racist.

Gab's fine.
To be fair, casinos are not legal in many (most?) places in the US...
Von Neumann did it by watching loads of Khan Academy videos on YouTube, taking regular Vitamin D supplements, using Anki cards and practicing mindfulness meditation.
My X240 isn't yet 10 years old, but as of today is among the fastest machines in my house: It literally flies with Debian+XFCE. It's remarkable how long hardware can last if we ditch bloated software.
My team runs a daily stand and it's the highlight of our day.

* It cuts about a bunch of other noise and meetings because we hash a lot out during daily stand.
* It a fun watecooler some days.
* We have engineering, product management, and design in stand up. Great opportunity to understand and build empathy for other specialities.
I'm at a FANG with some of the smartest people I have ever encountered in my life, yet no one seems to agree with me that devs should not write their own tests.

There is an unwavering belief that knowing the corner cases and weak points of your own code makes you somehow better at writing the tests. We also seem to be obsessed with testing that is half-way between unit level testing and system level testing. We test APIs and features more or less in isolation.

Tests should be written by antagonistic developers who are not at all familiar with the code. They should stress the capabilities promised in the interface documentation. Hiring more people who are dedicated to testing costs a lot of money though. I don't see things changing anytime soon.
Catch-22 is a book where your perception of it is altered greatly by your mood. I first read it when I was 16 and thought it was the most humorous book I had ever read. I read it the second time at 20 after a bad break up (I had what I thought was the brilliant idea that it would cheer me up) and I found it the most depressing book I had ever read. I have been meaning to read it a third time to see what age has done.
Welcome to the social sciences, where the facts are made up and the points don't matter...
So bipolar then?
> How will journalism fund itself and maintain some semblance of integrity?

i suspect journalists can do that by asking for a larger subscription. If society truly values the work of journalists, instead of it being a conduit for advertising, then it will be paid accordingly. If not, then, yes, it's a shame, but it really means that nobody values the work of a true journalist (especially investigative journalism), and it will die out. But that's reality, as sad as it would be if it were to be true.
All said and done there is a definite link between creativity and mental illness :

https://en.wikipedia.org/wiki/Creativity_and_mental_illness
I suspect that the amazing ease of use to the user - get a cab in just a couple of taps of the finger - is being backed not for its own sake, which appears to be of limited use to the average individual currently, but because the infrastructure behind it could easily and far more profitably be adapted to operate self-driving cars.

So I see it as a speculative sort of investment in self-driving cars as much as in these companies. To dominate the market when self-driving cars emerge, with their increased capacity and lower overheads, would be pretty sweet.

Apologies to cab drivers for describing you as 'overheads' and 'decreased capacity' within a single clause, I realise this sounds cold but this is how it will be seen within the companies.

Also, I've never personally used Uber - I don't earn enough to use cabs in general. If it's more complicated than I assumed to order a cab through it then my other assumptions are probably wrong too.
This leaves out the most important part! If at all possible, get someone else to review your post before publishing it. This helps you find out if the post is really as well written as you think it is.
This depends on what type of blog you are trying to write. If you are trying to write a blog that comes close to news releases, then I suspect this is good advice (though #6 is situational), but I have never tried that type of thing.

Most blogs are really more like exposed journals that are only interesting to people that already know the writer well (facebook/myspace has started to, but not completely, supplanted this type of blog). For all of these, this advice would be inappropriate.

Most interesting blogs fall in between. ArsTechnica for instance calls itself a blog officially, but it has strong elements of reporting in it. In this type of blog, the readers often want and expect some editorializing and some personal anecdotes along with the news and research. For this type of blog, #3 and #4 are absolutely vital, but the rest are probably inappropriate.

Different types of blogs fall at different points between the news paradigm and personal journal paradigm and will therefore have different approaches. I suspect #3 at least could improve most blogs out there.
"Does the leaked stuff pose a national security risk or does it pose a national security embarrassment over basic human rights violations, waste, carelessness and so on?"

I have no idea, I haven't seen the leaked stuff. But where diplomacy is concerned the line between "embarrassment" and "risk" is pretty thin, especially where the embarrassment is to another country. There could easily be things like candid discussions of personal weaknesses of foreign dignitaries, diplomatic tricks played to fool other countries into doing things, invoices for the hookers they hired to entertain the Saudi ambassador... if these sorts of things become public they could turn allies into enemies, and that's not good for anyone.
Could you provide a link to the argument that there is a one-to-one function from the rationals to the reals or at least provide more details about what you mean.

Thanks.