skysight-inc/HackerNews huggingface dataset:
Yes, my OS is slightly "weird" for reasons I did not choose. Funny story: while I was trying to figure out what the hell RVM was doing, I mostly ran across people running OS X who had the same setup: 32-bit OS on a 64-bit chip. (And for what it's worth, Python native extensions build for the architecture of the Python executable — you know, the thing that has to load them — rather than the architecture of the machine.)

I never complained that it didn't work with an old database. Ubuntu's versioning was just a fun surprise. I don't see why it wouldn't work with Postgres 9.1; I just figured I'd do the upgrade while I already had my foot in the door.

Maybe if installing Rails apps is still a huge headache after the fourth or fifth time I've done it, something is wrong with Rails. Maybe.

I have a fairly mundane server running the latest Ubuntu LTS with all stock vendor packages. If your app is such brittle crap that this is the "server from hell", well, it's no wonder everyone is using Docker.
I wasn't aware of that policy - thanks for noting it.
cat -v backdoor.sh also does the trick...
I agree with most of this rant, but not with this too common mith: "Only one thing can bind to port 80 and it has to run as root". I generally use the following command
<pre>setcap 'cap_net_bind_service=+ep' /usr/bin/nodejs </pre>

Just learned the trick to become root when you belong to docker group. Awesome
McKinsey reputable???

This company just plays the normal MBA playbook in an echo room and every listens without thinking.
Just look at the former (some now bankrupt) companies that hired McKinsey. Amongst them Enron and Swissair.

http://www.ritholtz.com/blog/2011/03/is-mckinsey-co-the-root...
http://business.time.com/2013/09/10/mass-layoffs-overpaid-ce...
People forget that MS used to have it's own Unix in the 80s: Xenix. I ported a large DEC PDP Fortran codebase to run on Xenix back then - it was far too big to fit in the 640K DOS limit. Writing the Xenix device driver for the 68000 powered graphics card in the PC was fun.
Vlog: Secured SCADA Solutions for CIP (Part 1)
Surely her contract specifies she will receive $X,000 worth of BTC rather than a fixed amount of BTC each month?
because the buyer is not sure that you didn't forge your browser history with fake data. Not doing it consciously and having a middleman "guarantee" that the data is honest is easier.
Also make sure your build system only works with a specific combination of Windows XP, cygwin and ActivePerl.
I know two people who tried to start a business in Germany and failed, not because of the EU but because of domestic, German rules.

One tried to start some kind of innovative form of pharmacy (the details weren't clear to me), but found himself unable to join the pharmacy guild, and apparently it is illegal to start a business without joining the guild. The other tried to start a bed & breakfast business, but the 'breakfast' part was closed down indefinitely when the food safety inspection found he didn't have the right license for a Sandwichtoaster. Apparently there are different regulations for serving a hot breakfast.
Show HN: News Chit – News in Short Hindi and English Videos
Sorry, I forgot to painstakingly document the innumerable hours I spent reading documentation (or trying to find critical documentation that didn't exist). I didn't think that would be a compelling read.
The main reason is I'm going to sleep now and want to remember to get back to this thread tomorrow :)
I had something similar happen with one of my services. I have an "Update your Payment Details" page for paid subscribers that lets them enter new card details when their old card expires or they just want to switch the card they're using with us. It normally gets used a few times a month, and anywhere from zero to one time over the lifetime of a customer.

But then the bad guys found it. And individual users started updating their card details dozens of times each day.

This went on for several days before I noticed it in the logs. It was easy enough to fix: users now get one update per year, unless they email me and ask what's wrong with that card update page. The bad guys moved on to greener pastures and life went back to normal.
The operative word is needs, since Docker is the only supported way to install this particular software. Which is, I cannot stress enough, a forum.
You must be from the east. In WA, there are massive tracts of land that you can't get through, privately owned. This of course doesn't matter much - who wants to get to the Gibson, anyway, but .. its not like Australia doesn't have its own private owners.
Given gmail's volume that would pretty much make it a requirement for all other mail services. A mandatory STARSTTLS would make me happy!
Evayadesk
If I'm reading that correctly, the problem was that some MySQL versions couldn't actually restore database dumps they created using mysqldump if strict mode was enabled. That's a pretty ugly bug.
Corporate desires not the real zeitgeist. The real zeitgeist is represented better by the millions of people who think it's stupid they can't watch game of thrones the day it airs in America.

Our Convenience Culture views copyright as an unnecessary impediment to satisfying market demand. Look at how Netflix sponsored content creation to bypass the traditional copyright barriers.
True, but you can stand up against the US government. Try that in China - anywhere. I live in Macau for 6 years, so I am a bit closer to the situation, and I have been to the mainland several times. One could also argue that there have been more than a dozen 'Edward Snowden's' in China that have been silenced, jailed or killed before they could get the word out. At least, whistle blowing does work in US some times when it counts, however, I believe there were some that were silenced in the US too.
Interesting, when a tragedy occurs in the mainland, scaffold collapse, etc... a number is reported that most people say is half or a quarter of the true body count.
Thanks for using us! If you need extra help feel free to email me - jason at siftscience dot com
All Videos from Polymer Summit in Amsterdam
Actually I suggest writing less code, assuming that Docker is a whole lot of code and "what if we write down dependencies" is more interface than code.
Vysor puts a fully controllable window of your Android on your desktop
Evayadesk - Easily Integrable SaaS Solutions

Our Vision is to Accelerate Businesses with Rapidly Integrable SaaS Solutions.

We have released our First Product Roctik a cloud based support ticketing system.

Our Products intend to make product development integration swift, feature rich and empowers customers.
We craft our products with passion, involvement. We use cutting edge technologies and bring seamless efficiency into our products.
We enable to address customer needs with essential features. Ease of use is the way of life for customer with intuitive workflows.
Customer Delight is Our Mantra.
Hawthorne effect
That used to be an unofficial convention of the Spanish language regarding accented letters: only in minuscule text but not on majuscule (capital) text. The Royal Academy has always supported (since at least 1792) that majuscules should be accented, but it was difficult to do so since movable types and typewriters didn't allow room for them: https://upload.wikimedia.org/wikipedia/commons/8/82/Acento_e...
I observe that they'll happily charge you $99 to install it on your machine for you.
> is there a way to require someone to enter the pin that they use when they buy something in person

A PIN can be required for "cardholder present" transactions in most of the world. Some combination of card issuer, transaction processor and merchant decide at what value transactions may proceed without a PIN — e.g. a train company's actual loss from a fraudulent ride is very small, so they might not want the delay of asking for a PIN on a ticket machine. Similarly for McDonalds. But if you're buying a TV, you will need to use a PIN.

It's almost 100% of transactions in much of Europe, over 80% in Africa and South America, lower in the old Soviet Union and Asia: https://www.emvco.com/about_emvco.aspx?id=202
Well, I used to be rather critical of 3D Secure until a few months ago. My wife's card (on our shared account) got compromised and a 300 euros or so payment was made with it. No 3D Secure enabled for her because she had not given her cell phone number to the bank.

Our bank refunded it alright, though it took about a month, but the next week I received an SMS with a 3D Secure confirmation number for a similar payment, in HKD, with my own card (by the way, the only place we used both cards for payments was Taobao). I was able to call my bank which blocked the card and quickly issued me a new one. At least in this case it both saved us, our bank and some unknown online shop, time and money.

Also, I think the smart way to do 3D Secure is what capitainetrain.com does, they use it only for the first payment of a customer (and explain what's going to happen during the payment process) and all subsequent purchases don't go through it (since the customer has already been verified as being legitimate). It only works when you expect customers to come back regularly, though.
Sift Science is a great service, I would highly recommend testing it out.
It's an issue only if you don't reach an appropriate usage rate of the car. Which is a non issue for shared cars in town.
It also warns you if you try to use gmail to send mail, because gmail throttles you to only sending 2000 emails per 24 hours.
Last time I complained about this, a few people said exactly the same thing, but naming a different product.
> It's almost 100% of transactions in much of Europe

Unless the customer is using contactless payment card?
Interplanetary CubeSats (2011) [pdf]
Interesting; I had not heard of OSv, thanks.

I am still hoping that something as radical as MirageOS will eventually take off, since we really seem to need it--at the very least, from a security perspective, if not a complexity one. Just by dumping C and Unix, and using a memory-safe language (such as OCaml) instead, we eliminate an entire class of exploits.

I will readily admit, though, that trying to force the entire world to use OCaml will surely be the fastest way to fail at this goal. Perhaps aggressively sandboxing is an adequate alternative, which would allow people to write code in environments sitting on stacks containing code from unsafe languages, without single exploits leading to entire system compromise.
To be fair, an IDE is not geared at auditing and it would be much more painful to do freeform annotations in it. Circling problematic areas, drawing connections between variables/functions, making handwritten notes in the margin... all that is easy on paper and requires workarounds/other programs on a PC.
I'm not familiar with Mono or any of the .Net on Linux efforts, so forgive my ignorance. However, having a running .Net stack with a CLR VM and class libs is not the whole story when it comes to running Windows native server side stuff. One of the things I've discovered building spreadserve.com is that there's a lot of COM & Registry plumbing necessary to enable Windows native desktop binaries to run in a server environment. So I imagine running real .Net based servers on Linux would require something like Wine to supply ABI compatible interfaces to the registry and COM services, and lots else beside. That's a non trivial undertaking. The MS Linux described in the Register story sounds like it's dedicated to networking tasks. I'd bet there's no .Net running on it at all.
> If you write software, never be "helpful" and try to fix problems with input data you can't handle.

Yep. Accepting bad data in any way is a bug, not a feature, and it isn't always (I'd suggest it isn't commonly) intentional: for instance mySQL used to accept dates like 2015-02-30 simply because its internal date format permitted it rather than because they were explicitly allowing it - it was an accident not an attempt to be helpful.

Accidental bugs that accept bad data are often indistinguishable from intentional "help", and can get passed up through a stack of calls (App A uses library B that wraps library C which calls service D that uses library E...) so even if the help is very well documented at source that knowledge is usually lost as you move up the chain and the application dev is left with a library that accepts bad data unbeknownst to him/her which could end up masking a serious bug that will bite them later.

> "Fixing" broken input data is nothing but actually corrupting

Exactly. The old "be strict in what you send, but generous in what you receive" is often misinterpreted - you should only be generous in what you receive if everything you receive can be properly handled all the way into your stack and all the way back out again, and never be generous enough to accept bad data. Back to the date example: yes, accept any unambiguous date format the user might throw at you, but never accept an invalid date.

> If you are in a position where you can't do something based on the input data, then blow up.

Definitely. If something could fail it should fail as early as possible, and not quietly in development (caveat: failures should not be outwardly verbose in production for security reasons), that way you are more likely to catch problems early, before they compound into something worse.
If this is not astro picture of the year, I don't know what is:
http://www.nasa.gov/sites/default/files/thumbnails/image/nh-...
Sure, but what's your point? My contract states the same and my national currency is the Euro.
This depends on the gateway you use. Recurly can't do much but refer you to the gateway in this case.
The Rise of Voice Interfaces
Well, it is possible to install Discourse in 30 minutes:

http://blog.discourse.org/2014/04/install-discourse-in-under...

This does require Docker, though, which means 64-bit and a modern Kernel.

It's absolutely true that Rails is a very tough stack to install (and let me put my tinfoil hat on: do you think 37signals nee basecamp was ever incentivized to make it easy for people to install Rails apps?), but it needs to be competitive with PHP in the long term if we want things to change.

Docker was the only sane way we saw to move forward and support the community with our small (currently 7 person) team. We're all-in on Docker, all our internal hosting uses Docker, and it's the only officially supported install method for Discourse.

So never let it be said that we don't eat our own dogfood. Because we do, and it's goddamn delicious.
Analysis of Antidepressant Paxil Finds Data on Teen Risk Was Held Back
I've thought a particularly effective approach is actually to do the "right" thing but take it to ridiculous lengths - the "Enterprise FizzBuzz" that was posted on HN recently being a good example of this.
Wikimedia maps comes with India without Kashmir
I was using VeriSign for years. Then my site got hit with a "carding" [1] attack. VeriSign was simply not interested in helping with it, the merchant bank I had coupled it with was not interested either.

So I cancelled VeriSign and the merchant account, and use paypal and Amazon Payments instead.

I did make the rounds of a few banks, all were eager to set me up with a new merchant account. All gave me blank stares when I asked if they had any means of preventing carding attacks or other frauds.

[1] A carding attack is when there's an attempt to buy something for $0.00, just to see if it is rejected or not. I was getting one every minute or so. I got charged for every one of those, and so soon had racked up a grand in charges.
Url changed from http://washington.cbslocal.com/2015/09/16/study-birds-fall-i..., which points to this, which admittedly isn't an original source either.
Thanks for the kind words.
MakeMyTrip’s woes prove market share doesn’t equal online success
FISHINO: Arduino Become Wireless – Open Electronics
At any rate, your language does look rather interesting, and I should thank you for your blog post. It has made me think about how the syntax of Rebol (which was unknown to me) could possibly inform a language designed to combine ideas from both Smalltalk and Lisp.
Universal Cobra Driver Pack 2015 ISO Full Version Free Download
The automated scripts that the criminals use will try to simulate a real customer signup and transaction, otherwise it's too trivial to filter them out.

This is also why fraud detection is a big industry, you basically need full time staff to analyze the current types of fraudulent transactions and update your filters as fast as the criminals update their systems.
I had Susan as a tutor in my first year at Imperial. This made me chuckle.
The Elephant Rope
I don't think it is quite that clear cut. See, for example, Postel's Law AKA the Robustness Principle.

Be conservative in what you do, be liberal in what you accept from others

https://en.wikipedia.org/wiki/Robustness_principle
Couldn't you do a preauth on the cards and then completion when you are ready to ship?

At least then you don't get hit with chargebacks.
This is true but in this case he's not directly integrated (he's using Recurly). Better fraud tools is something we are actively working on.
Sometimes they do also have address information, sometimes they don't. As with everything, it will reduce the amount a fraud a bit but not eliminate it.
I'm sorry it was difficult to get Discourse up and running!

If it helps, I'd be glad to throw in a free Digital Ocean $20/month droplet -- I can set it up following our guide at http://blog.discourse.org/2014/04/install-discourse-in-under... and then hand it over to you for everything else. We also have a special Mandrill reseller code so we can give you a Mandrill account with 50k emails/month as part of the package. Just email us at team@discourse.org and I'll make it happen.

(Obviously I am a fan, because PHP fractals, man.)

Yes, this will require Docker, which means a 64-bit OS and a modern Linux kernel. We initially tried supporting arbitrary Discourse installs but it quickly became a support nightmare for our small 7 person team. We adopted Docker because we saw it as the only way forward to have sane support both internally (for hosting) and externally. We are all-in on Docker, for what it's worth.

I'd argue Rails has historically had very little incentive to support super easy server installs; how many large open source Rails projects can you even name? Certainly 37signals nee Basecamp isn't too concerned about how hard it is to install their webapps on a server...

Long term, the only real solution is VPS and Docker. I think that has a lot of other benefits for the whole hosting ecosystem, too -- it opens the door to not just Rails deployments but all kinds of alternatives.
If you don't mind me asking, what cocktail of drugs are you on? Also, why are you so against them? I ask this because I've tried and pretty much exhausted every thing I can think of to be happy, and I'm probably going to go on anti-depressants soon. I'm thinking I will go for an SNRI, but I will see what the doctor recommends. Any advice you can provide would be much appreciated.
They also support SMTP over TLS, which isn't vulnerable. Not sure what you mean about switching, perhaps you're confusing terms? TLS != STARTTLS.
In short, I would recommend supplementing with L-Tryptophan and DL-Phenylalanine. Tryptophan before bed, and DLPA first thing in the AM. To understand why I recommend these things, read the book "The Mood Cure" by Julia Ross.
It's certainly easier to sell Bitcoin locally than gold bullion.
Vagrant's only intended as a development solution, though, not for production deployment.
Azure Cloud Switch
> manage default risk

That's the justification for interest in the first place 20-30% covers risk to absurdity.
It was posted a few times before: https://hn.algolia.com/?query=polygon%20poland&sort=byPopula...
Just, getting on the front page is some sort of quality x interest x luck.
Wow, I got chills looking at these images!
There's a (relatively low) transaction limit for contactless payments without additional verification. So, to buy a TV, you still need to enter a PIN.

Newer payment terminals can support device-based customer verification for contactless transactions, called CDCVM. The transaction limit doesn't apply if CDCVM is used. This is the mechanism used by Apple Pay, where you verify your identity using your fingerprint via Touch ID.
Thats simply not true. They sold lots of cars to Greece before that country went into crisis. Money is not actually a real measure, and very much can be created on demand. There is also a big difference between money spent by a growing middle class versus money spent by corrupt officials. So you need better data than number of BMWs bought.
It doesn't; 1GB is the minimum. We have to fit Redis, Postgres, Ruby, Sidekiq, and 2 Unicorns in there. There are a bunch of fairly active instances on 1GB RAM, which works fine. If your community grows a lot you'll need more resources, of course.
Hiring Triple D
Living in Holland, where everyone does online transactions with iDeal, I find it hard to understand why the rest of the world is using credit card payments at all, for anything. It is massively insecure, it's expensive for the merchant, and theft is ignored (when millions of stored creditcard records are stolen, those cards are not invalidated and replaced?). This is all at the cost of customers and other merchants.

I'll keep trying to avoid using a creditcard as much as possible and use other payment methods when I can, both online and offline.

And yes, when implementing payments on a website, use a service that does all of the complex things for you, and never store sensitive data yourself.
Perhaps she and her company should take another look at what remittance companies are out there: the 'fact' that Bit-coin is a cheap way to transfer money (and that 'traditional' money transfer is expensive) is mostly wrong:

https://www.saveonsend.com/blog/bitcoin-money-transfer

TL/DR: shop around the money transfer companies and you can save a fortune, their fees vary wildly. Online companies can be very cheap indeed. Comparisons with bit-coin mostly cherry-pick the expensive companies to make themselves look competitive.
I'd be surprised / disappointed if banks weren't subject to PCI DSS audits and I know from my own personal experience with PCI compliance that the SSL 3 and TLS 1.0 would fail many 3rd party vulnerability scans.

So I was very surprised to read your post and after checking the URL (www.halifax-online.co.uk) myself, sadly it seems you're right.

Sadly this isn't the first time I've questioned Halifax over their security policy for online banking. When I first signed up with them approximately 5 years ago, their login process consisted predominantly of researchable questions (eg "what was your pet's name", "what primary school did you attend", etc). Thankfully now they have a standard 2 password process now with 2FA used for any additional payment processing.
Just happened, working on a new codebase. I never print more than ~5 pages but it helps me organise the codebase in my head when it's a complex one. As an alternative, I also write down code flows. I always keep a notebook by the laptop.
They're not inviting separate contributions. There's no edit tab. If you want to edit these maps, you need to edit OSM.
How do you use the collected birthdate to reduce fraud?
Front end microservices with polymer
If you are going to the effort to learn all the ways you need to tell MySQL to not corrupt your data, you may as well spend that energy learning PostgreSQL