skysight-inc/HackerNews huggingface dataset:
I'm a web developer, but I can't really use my skills to provide an open source web app the way I'd like to. I'd like to build a small server-side budgeting app that people can use from their computers or phones to record expenses, but there's no way I can ask people to find a web host that lets them run rails, or set up a heroku account or whatever.

So my only alternative would be to run the service myself, but then I'm storing other people's data, I have to worry about scaling if lots of people use it, and user accounts, and all this stuff.

The idea of sandstorm is folks run this platform on their personal servers, and then it lets you browse an app store like interface and one-click install these server side apps. So I'd bundle up my budgeting rails app as a sandstorm package, and if someone wants to track their expenses from a variety of devices, they install the app. Now they're running it so the data is theirs, there's no scaling issues, and user authentication is provided by sandstorm.

Sandstorm is still in its infancy so there's not a lot of apps available and the development APIs are being worked on, but I hope it's the future. It would lead to a more decentralized web with better privacy and users owning their own data.

I'm hopeful, if not optimistic, for a future where every family is expected to have their own little server running somewhere. And they access that server through the sandstorm web interface, and can easily add little apps to it. My budgeting app, a webmail app, some future federated profile app to replace facebook, etc.
This. He says "We need to find a solution to install those apps with a dozen dependencies, config files, crontabs and daemons". Well, although it may not be mature security wise, this solution is still Docker.
That's not unique to Bitcoin though, is it?

I have a box of foreign money at home which I use every time I am abroad. I bet most people have something like it.

If I were to trust you on this, I'd have to record the price of that currency with every cup of coffee in every airport I buy. In practice nobody has done that, ever. I'd say that's safe.

Should I suddenly pay cash for new sports cars or houses out of my little box that would be different of course. I doubt the difference between a cup of coffee and a sports car is really encoded in law, but the difference is there and should you find yourself in a grey area (old used car perhaps?) there are people specializing in this very matter that can help.
PayPal does to some extent. And then people complain about how expensive PayPal is. In a commodity, race to the bottom world of cc processing I am not sure it would be a good business practise to bundle fraud prevention and processing. Let people be bitten and then willing to pay to avoid it is probably a better practise than charging for it up front. But they do buy them. ACI bought ReD last year for instance http://www.aciworldwide.com/news-and-events/press-releases/a...
Yes its refreshing to see them take a complete departure from Braid instead of just seeing Braid as "formula for success" and re-iterating it. (I am looking at you Angry Birds).

I like how he used his financial freedom to follow through with something he really wanted to build in a way that he feels justifies his dream
All of mine seemed to come from Mexico. Either IP being in Mexico or the shipping address being there.

Still many orders originating from Mexico seemed like they might be genuine, as the customers had filled in the questionnaire with their favorite animes etc. valid looking answers, so I didn't want to block the entire country.

My theory is that there really was some kind of media mention there, which resulted in some real orders but also some fraudster happened to hear about the service that way as well.
it seemed possible that I had been mentioned in some local
Something like a simple proxy / VPN IP detection should be used because I assume most of the "carders" don't use their home IPs. There are decent free solutions online like W I T C H and GetIPIntel.
Currently we're integrating Sift Science to avoid this otherwise serious and annoying issue. I think it happens to everyone who's directly accepting credit cards online. Does anyone have experience with Sift Science or similar services? (I know MaxMind has one but that, to me, seems inferior to SS's.)
If you're lucky enough to run in a production environment that has zero configuration policy or minimum security requirements, then yes, granting your webapp superuser privs to the database mightn't be a deal-breaker.

For everyone else, it's giant shit sandwich, and a constant reminder that the project couldn't arsed untangling their own weird idiosyncrasies from their distributed app, and that this crap wouldn't fly with a traditional distro package, or wouldn't have mattered with the more traditional tarball/REQUIREMENTS/INSTALL.txt that made way fewer assumptions about the end-user's environment.

I love docker, but it's letting people get away with murder.
Thanks for the feedback. Chocolates are not so good to send in this weather (melt risk), will start including those again during colder months.
The Refugee Crisis Through the Eyes of Data Visualization
I think that's pretty fair. But I still think that using docker is probably better than having the user do that manually. In a more ideal world, the dependency, version and configuration management would be better, but using something to wrap around those defects and get something shipped isn't inherently bad.
> I worry now that rails is past its zenith, and that starting a new company with rails today might be like starting a company using Java Spring in 2007.

What this misses is Rails was the first framework that really got the web. It's not that Rails had new ideas, but that it took existing ideas and packaged them nicely for the web. Before that, you could either just wing it rolling your own in PHP or Perl, or else use Java because you were a "serious software engineer" that cared about well-defined architectures. The reason Rails was able to eat their lunch is by marrying just-enough-structure with the on the ground reality of developing web apps. Java frameworks just never got this until they saw how much people actually loved Rails and that in fact you could get more done with less.

So all these complaints about Rails stagnating are overblown—Rails still gets the web, or at least I should say it still gets server-side web. It's not innovating the way it used to, because it is mature for it's use case. That doesn't mean it's not well maintained.

The thing that will make Rails a bad choice is the thing that makes server-side web rendering is a bad choice. Obviously there are huge use-cases for single-page apps where Node really shines. There are also cases for microservices where Go really shines. Rails is not all things to all people, and it is no longer the new hotness, however it's core use cases aren't going away any time soon.
Presumably, it would at least involve implementing "Verified by Visa", which protects online transactions by requiring a password or PIN.

Mastercard and Amex have equivalent services, and these are all widely implemented by websites and card issuers in Europe and other countries.

I suppose they are not so widely deployed in the USA or Japan, but at the very least, you'd protect yourself against fraud involving cards issued in countries that do use it.

http://www.visaeurope.com/making-payments/verified-by-visa/
From my experience running eCommerce sites, the author is right, beside fraud 'noise', fraud happens in waves.
Yes, I made my own AST. You know, it started as a parser, evolved into an interpreter :). But I will definitely talk to Andreas (creator of Nim) if using Nim AST would be an advantage.
You know, I do think "Ni" as a name sucks but my imagination was low. On the other hand... renaming to "Eki Eki Patang" or something similar is a thought I have already entertained. When reaching a higher level of maturity ;)
That was my mistake, assuming that since I was OK with the noise, everything is fine. Didn't know about the fraud tsunamis.
I never understood why people use MySQL for anything where correctness is important. The auto-truncaction is only one of many nasty surprises.

Did you know that auto-truncation also kicks in if your columns values are small, but you run a CONCAT on them? That was a nasty surprise when a generated a CSV line on DB side, which by bad luck was truncated immediately before a comma, so the result was correst, just the jast few items were missing. And ever looked at the handling of invalid dates? Not to mention what happens if you forgot to specify a column in your GROUP BY clause, but use it in the SELECT part ...

To anyone who is so brave to write their application using that database: Be sure you know all those issues and take care of them in your application. Or make sure you aren't affected by them. Or, switch to a high-quality database!

I switched to PostgreSQL a long time ago and never looked back. These people care about exactness, quality and clean extensibility in all directions, even user-defined index structures are possible (GIN, GIST). The problem that PostgreSQL was slower than MySQL disappeared as soon as MySQL became transaction safe with InnoDB, because it was now a fair comparison as PostgreSQL was transaction safe from the very beginning. Also, the PostgreSQL project management is one of the best I have ever seen, meeting schedules, regular commit fests, quality-driven, honest beta releases, and so on.
Yeah, although I had no such association (I am swedish). But... I did notice the Chinese connection, which I liked since we have two daughters from China. ;)
Smart Top ways to build inbound links [ back-links ]
Requiring Server Name Indication (SNI) extension is quite significant as if I understand correctly then this blocks Windows XP to access any of the Google services with any version of Internet Explorer.
Works fine for me in Safari. Stutters like mad in embedded Safari e.g. in Facebook
1. I copletely agree it isn't exactly the best design decision, on the contrary, but the developpers are still too blame as well in my opinion. They chose the datatype so they should have read the documentation, especially the caveats like this, and they should have done something to deal with this.

This applies more generally. There are a ton of programming languages, standard libraries and APIs out there with weird/confusing/exceptional/undefined-behavior-invoking types and functions depedning on how they are used so a sane developper should alwyas check this and handle accordingly, even though it might lead to more code to handle edge cases than to the actual expected main code path.
> I never understood why people use MySQL for anything where
> correctness is important.

They probaly know how to configure it.
Active malware campaign uses thousands of WordPress sites to infect visitors
Would verifying zip codes mitigate this issue, or do the carders have access to that too?
I wonder would that still be the case if Candy Japan was using something like Stripe or Balanced, what happens in that situation? Would you be still responsible for 15 EUR chargeback fee? What did Recurly do in this case?
Thanks!

I wonder whether that protection is always available? Ie can I always decline to note the source?
Nice! Would be good if it was on homebrew.
"for subsequent data loads I prefer websocket"

There is notable difference here. Developer needs to write code to implement server-push in Websockets but HTTP2 servers will do that for you by sending all dependancy files with a single request.
Also, I found it interesting that this free form of syntax actually can be made quite readable (in comparison to Lisp, which I love in theory but balk at trying to read).

I even think Ni is turning out more readable than Rebol/Red - probably due to the use of keyword syntax and infix arguments. And the idea with arg words made lambdas very lightweight, much more so than in Rebol.
I'm obviously not an expert, but is there a way to require someone to enter the pin that they use when they buy something in person? (I also found the following FAQ from the link you gave amusing "Why do we need Verified by Visa? Hasn’t Visa been taking my security seriously before?")
Private Medical Data of Over 1.5M People Exposed Through Amazon
Is '10' a magical number?
This is going to be a great enhancement. The maps in Wikipedia articles always seemed very lacking to me.
ZIP codes seem to be a US-specific thing.
In the context of a zoomed out global map it would seem to make more sense to approach it by Metro area. Vancouver metro area is 2.5M vs Calgary's 1.2M. Seattle is 3.6M

Also, I would think national capitals should be included where possible.

Alas, it's an early beta.
Google sues SEO company over robocallers that claimed affiliation with Google
Tried with vim, I see the escapes, cristal clear.

However, I honestly don't see why I should do something foolish as `curl | sh`, even though from time to time I see websites suggesting this crazy approach. The first thing I think of is "why should I give you control on my shell?".

…I guess, however, this is kind of a natural behavior for the user who doesn't know the shell-fu. I've seen a similar article once about Ubuntu Forums. Unfortunately I can't recall the URL.
Mindset? I was simply providing a different, I think more accurate, interpretation of the anecdote presented upthread. The person was paid in bitcoin, but in this specific case, because of the circumstances, I think it's no different than if they were paid in some other easily fungible commodity, such as gold. I interpreted the usefulness in getting paid in bitcoin not that the worker now had an easily used currency, but that the worker now had a commodity that could be exchanged for a local currency to actually buy most things needed, and it was cheaper than dealing with the local currency exchange fees.

Yes, it also points to the utility of bitcoin, but this specific example also points to it's use as a commodity, IMO. As it gains in popularity, I think it will gain more utility as a currency, but until then it's a currency of limited use (limited in that there are limited venues that accept it) except as a commodity.
Get Rid of Medical Expenses
One might try to hack that with %s/... or ,s/... so the first char isn't a letter :)
Soon? I thought it was considered common knowledge that they already did.
genius! :)
Came here to recommend a sift science type solution. I've previously integrated fraud systems like Cybersource (clunky interface, wouldn't recommend)
Shopify makes Amazon deal
My experiences (could be outdated, last time I've tried RVM was at least a year ago) are that setting up a VM is much less painful than convincing different applications to load the same environment. Your mileage may vary
Since pro accounts initially cost £6 for month, it turns
out that this is low enough that it won't send red flags
to stolen cards

That's interesting (scary). What is the minimum transaction that Visa actually gives a monkeys about? And why, if a card is stolen, does not any activity flag up?

Edit: more importantly I never even thought Inwoukd need to implement fraud detection - is there a primer on "things you never thought of when selling on line - from VATMOSS to Vampires"?
> You earn extra Brownie points whenever the beginning and end of a block appear on separate pages in a printed listing.

I'm aware that this is from 1997-1999, but I'm curious: Do people still print out source code for better reading?
Yes and no. If you have a physical presence in an EU state, that one will probably get you for tax fraud. If you have sufficiently high transaction volume they might find another way.

I have never heard of it happening, but theoretically any member state in which you sold can start a criminal trial against the responsible persons, making travel to Europe a bit more complicated.
We have already learnt that tightly coupling components inside of application is a huge code-smell/design issue. Why is it suddenly different for multiple applications?
Amazon selling six-packs of its $50 tablet computers
Memebox (YC W14) is growing again: Hiring for design, business, and engineering
Funny list of pictures.

Another cool thing, besides icebergs, would be a service checking for escapes given the URL. Or for other caveats (e.g. is the url https? Is it editing weird files (follows list of files))
Also a later version at http://www.stateslab.org/HowToWriteUnmaintainableCode-Green0... which includes that crazy offbeat language, JavaScript (which was, amusingly, my contribution).
>all of my fraudulent purchases came from Vietnam to the point that at one time I put in an IPTABLES rule to block the entire country.

I can never work this out; it seems that scammers from different countries (or using hacked servers / proxies?) are attracted to different sites or types of ecommerce sites.

For example:

- One of my sites has huge fraud from Ukraine and Russia

- Another from Indonesia

- Another's problem country is Pakistan

I typically use https://siftscience.com to identify fraud, plus country-level blocks where it makes sense.

Damned shame that all the legitimate users from a given country get blocked thanks to the fraudsters!
The function of Bitcoin goes beyond it's use. It's sending a very clear message to other forms of financial transaction to keep it simple and cheap.

I think it delineates a threshold where no other financial transaction can go. I think it's very beneficial even though comparatively few transactions go through Bitcoin.
We can answer this question, but first we must make it operational. Let's measure a "usage" of bitcoin as a bitcoin transaction. This is the most simple, general measure of bitcoin usage. Now we have a quantity. We can graph it. [1]

Now, we just need to get some data on whether these transactions occurred due to commerce in bitcoin, or due to trading for a profit. We can't see this on the blockchain directly; however payment processors like Bitpay and Coinbase have access to this information. Coinbase, in particular, operates both an exchange and payment processor. It knows what percentage of transactions (within its market segment) are due to buys and sells vs. ordinary commerce.

Luckily, Coinbase has gone on the record answering this specific question! [2] Brian Armstrong, the CEO, said specifically at Techcrunch that the majority of bitcoin uses are for buying and selling things -- actual payments. [2]

So the answer to your question surprises you -- the majority of usage is very currency-like!

[1] https://blockchain.info/charts/n-transactions?timespan=all&s...

[2] http://techcrunch.com/2014/10/21/coinbase-ceo-brian-armstron...
Modified XCode mirror injects malicious plugin to apps it compiled
Thanks for post this helpful post Please visit for More information about -
Expert Packers and Movers Bangalore @
http://www.expert5th.in/packers-and-movers-bangalore/
Expert Packers and Movers Mumbai @
http://www.expert5th.in/packers-and-movers-mumbai/
Expert Packers and Movers Hyderabad @
http://www.expert5th.in/packers-and-movers-hyderabad/
Expert Packers and Movers in Pune @
http://www.expert5th.in/packers-and-movers-pune/
Or maybe a trolling bot? While most of statements are just nonsense, some of them could start hot discussions.
Check out Escherpad! It is a real-time collaborative iPython notebook client that just came out today. It somehow didn't make it to the front page at all.

Escherpad support Python, Node.js, and has setup tutorials that allows you to setup a npm packages locally.

http://lesquare.escherpad.com/@yang.ge/A-Collaborative-Real-...
the preparing circumstances of procurement of overall look elements, preparing automobile, providing army, identifying on the prices, coordinating with the branch workplace to be able to efficiently execute the procedure of moving.This article is really fantastic and thanks for sharing the valuable post.
Expert Packers and Movers Chennai @
http://www.expert5th.in/packers-and-movers-chennai/
Expert Packers and Movers Pune @
http://www.expert5th.in/packers-and-movers-pune/
Expert Packers and Movers Delhi @
http://www.expert5th.in/packers-and-movers-delhi/
Expert Packers and Movers Gurgaon @
http://www.expert5th.in/packers-and-movers-gurgaon/
Funnily enough this is the same guy who wrote "PHP: a fractal of bad design"
Nobody seem to know or mention : https://en.wikipedia.org/wiki/3-D_Secure

I have to use it with most online shops here in Switzerland.
Damn shame to hear about this Bemmu -- would've felt like a massive punch to your guts!

Maybe you should set yourself up some email alerts when things seem 'off'. i.e. no referral, and the user/bot spends no time filling out the form and hitting submit. What's your glue code like?

I'm rootin' for ya. :-)
ZIP codes are just a funny name for post codes, and most places have postcodes.
They are the ones who are accountable for choosing right individuals for right job. This is done after rigorous scrutiny of the individuals depending on their academic qualification, skills and encounter of the individuals. Expert Packers and Movers Bangalore @
http://www.expert5th.in/packers-and-movers-bangalore/
>I'm not sure which one to go with. How involved is it to integrate these?

I really like https://siftscience.com.

The important thing is to not over-think things; it's rarely that case that you truly, honestly, really need real-time automated fraud detection.

Start with implementing the absolute bare minimum. You'll then receive emails from e.g. Sift when a bad user is identified, and you can manually refund the transaction, cancel the order, and block the user.
Though they are not visible to the customers, they are straight contacted by the customers over online or phone, hence such individuals need to have excellent relationships and client managing skills and must be with the abilities of using the modern methods to create use of the same and assistance the client. Expert Packers and Movers in Pune @
http://www.expert5th.in/packers-and-movers-pune/
hah, ok, respect :)
They are the ones whom the client would be in contact while stepping into the residence of packers and movers workplace. They are the ones who would be with excellent relationships, client managing skills with excellent overall look and have tolerance to cope with the client. Expert Packers and Movers Mumbai @
http://www.expert5th.in/packers-and-movers-mumbai/
Expert Packers and Movers Hyderabad @
http://www.expert5th.in/packers-and-movers-hyderabad/
Basic Content Marketing Rules That Will Make Your Marketing Campaigns Successful
I work for one of the ad network. And I know the people in my company who implemented that specific piece of code for that specific opt-out feature. It's one of the most safety-critical feature we have so we do regression test before every single release regardless if we modified that code or not. So I'm pretty sure that opt-out feature works. Because if it doesn't, someone gonna sue us.

I find it really hard to communicate with you because before we even start this discussion you seems already tagged the entire ad industry as an "evil empire" who try to steal your personal information all the time. The ad industry is not an angle for sure. It's just a business that try to make money, like any other business. Intentionally ruin people's life is not the interest of any mature business. Believe or not, doing things that make people hate ads is the last thing the ad industry wants. Because the more everyone hate ads, the less effective those ad campaigns will be, and the less ad companies get paid. Most of the problems with ads today are not introduced in favor of anybody, it's just not as easy as you might think to find a overall better way. Do you recall how many years it has been for people to actually produce a practical substitution for gas engine since everyone realize it's messing up our planet?

In the end, I'm interest to hear your vision on how to fund high quality online contents today without the profit of targeted advertisement.