skysight-inc/HackerNews huggingface dataset:
I think they try to use "VISA" to distinguish it from a https://en.wikipedia.org/wiki/Visa_(document). I would expect a "Visa API" to have something to do with immigration.
Nothing says "enterprise" like Hawaiian shirt day.

Let's be relaxed AND conforming at the same time!
> We thought Obama would be the guy to save the country this. But reality is a lot more complicated than ideals.

People generally don't like being reminded that they have been duped into believing the hype, even when believing it was actually the best thing.

It's also a human psychological trick that we cannot easily imagine what would have happened if we did not believe or did not have "hope".

So there is fact that things didn't get rectified as much as promised, the fact that many people believed that would happen, and the probable actuality that things got much better than if they didn't believe.
7An2ieoW - invite has been sent.. enjoY!
As a locksmith in i Agree. Before calling an locksmith check all detail about them, whether they are licensed or not.We are 24 hours licensed locksmith in Texas area.
http://carroltton.toprated-locksmith-service-24hr.com/
I wouldn't hold my breath. The iOS Mail app can not negotiate any TLS version above 1.0 (for IMAP, possibly SMTP too) even though it obviously supports TLS 1.2 because it sends a TLS version of 1.0 in the ClientHello message even though that same message will contain TLS 1.2 ciphers (AES-GCM).

I reported it in October and Apple's security team replied they're aware of it but it's still not fixed 2 releases later even though they probably need to fix like 1 line of code (the advertised version flag).
I'll preorder the book, interestingly it wont be available until May in the UK but Amazon will ship from the US.

Can anyone recommend any other similar books in the meantime?
I don't see why. I've experience nothing but stability with the dev builds, honestly don't see why it's on 3.0 officially already.
I don't think I'm missing anything. What I was saying was that, from their chart at least, the current level appears to be completely normal or perhaps only slightly high. I'm willing to admit that their chart could be misleading, but they failed to clearly make their point and really didn't convince me that anything unusual is going on.
Cool+Balloon+Images+Start+Your+Own+Decorating+Business
Got it, Thanks a lot :)
Really can we we be any more obnoxious in pushing an agenda? I do not come to HN to read/see this tripe. The OPs slant is obvious just by the pictures selected, so will HN go this route as well?
I think that's because its fairly...intuitive?

I know that I could easily see when it was wrong, the difficulty here was getting it to be precisely right
You mean on the planets themselves, or between Earth and Mars or the moon?
Aerodynamic in 1 line of bash:

firefox https://www.youtube.com/watch?v=Mjpu0-o9iek
Imagine being a virus writer crafting a virus so complicated that it would only work in a future not written different kind of OS or virtual machine, and work in differing operating systems, and identify and poke for weaknesses by itself.

Perhaps it would just be a Science Fiction plot device!
Why do you need a responsive website?
No. You embed Stripe's iframe, which posts to Stripe. The iframe has a separate origin from your own website, which creates a mutual isolation boundary between your site and that iframe: neither can read or modify the contents of the other. It's just as secure as e.g. Paypal's workflow of redirecting to the Paypal website and back.
Is there a way to see commits, issues and releases

eg Would be interesting to see if there are repos that have disproportional issues/stars
I find it hard to find fault anyone who resists 3rd parties attempting to Embrace and Extend ("augment") their product. It is pretty obvious to me that getting disintermediated from your users lowers the value you offer & makes you a disposable part of the stack: as soon as the 'augmenters' become popular enough, they'd replace CL with a home-grown solution
Yes it's pretty straightforward. You can even do something much simpler if you want to self-host and just want a sort of encrypted dropbox for yourself.

I recently did a little proof of concept hackathon entry (gopher gala) for a very similar idea which works with keybase.io for keys or your own server - https://sendto.click, which is also open source. This is far simpler of course but there's no reason in principle you couldn't just compile the client yourself, write your own client and use their server, or just write your own client and server, using the same golang crypto libraries, which are here for pgp:

https://godoc.org/golang.org/x/crypto/openpgp

It doesn't have to be quite as complex as the keybase tools, though I'm sure they have reasons for every decision and have thought hard about the way it all works, the crypto libraries they've based it on are open source and relatively straightforward to use.

My one hesitation about using keybase.io would be their business model and whether they'll be around in 5 years. They might have the best intentions but if it doesn't make money, and/or is bought by a large corporation, all bets are off on how the service will evolve or whether it will continue to exist. I'd love to see them start charging money and have a sustainable business model.
Damn. This would have been useful 5 to 10 years ago before i turned into a walking lexicon!

I think ill have to bookmark this for my future children/trainee :-)

not that i dont make stupid mistakes when excited haha.
you don't need a special account for Keybase FS, you can use the Keybase account you already have
Version 4 UUIDs largely depend on your RNG's quality to avoid collisions.
They have actually fixed it - if you get bit with it then you can reference rdar://problem/22242515

The WebKit bug is here:

https://bugs.webkit.org/show_bug.cgi?format=multiple&id=1528...

The patch to fix it is here:

https://bugs.webkit.org/attachment.cgi?id=268394&action=diff

The workaround, FWIW (thanks Simon!) is to add shrink-to-fit=no” to the meta viewport tag.

For me, it was too much effort to get OpenGrok fixed, so I just did a rewrite rule in Charles Proxy that gets rid of the style attribute.
New Microchip Could Increase Military Intelligence Powers Exponentially
Melvin: A New Implementation of LVM in Rust [video]
And indeed the Angular documentation does not help at all. It's awfully abstract, and I always had the impression it's trying its best to avoid telling you what you actually need to do in order to achieve X, for most values of X.

This kind of non-documentation, coupled with the fact that Angular is IMO overengineered, drives me crazy.
Back in the days a lot of thought and ingenuity was put into making these viruses. For instance, the Friday 13th [1][2][3] virus:

* was only 419 bytes long

* infected both .COM and .EXE, increasing the size of the former by only 1813 bytes

* on infection, became memory resident (using only 2kb of memory)

* hooked itself into interrupt processing and other low level DOS services to, for instance, suppress the printing of console messages in failure cases (like trying to to infect a file on a read-only floppy disk)

* activated itself every friday 13th and deleted programs used that day

It still managed to spread itself worldwide (mostly via floppy disk sharing as the world wide web didn't exist yet) and went mainstream enough for the broadcast news to advise people not to turn on their computers on that date or to push the date one day ahead.

All that in 419 bytes, about a third of the size of this post.

[1] https://en.wikipedia.org/wiki/Jerusalem_%28computer_virus%29

[2] https://www.f-secure.com/v-descs/jerusale.shtml

[3] http://www.pandasecurity.com/mediacenter/malware/famous-viru...
The "Big bang" can't be proved anymore then too -- not billions of galaxies all flying away from us, but just: nothing.
UUIDs are out because the article says they're inefficient to store in the database vs integers, so one hopes it is indeed satire.
Remote: Yes

Willing to relocate: No

Technologies/Skills: UI, UX, iOS, Android, Web, HTML & CSS

Portfolio: http://radesign.in/portfolio

Blog: http://radesign.in/blog

Email: http://radesign.in/contact
Guns, hunting, fishing, offroad. Yep, you fulfill my stereotype of Alaska ;) Nice photos, they remind me northern Sweden.
Number crunching: Why you should never EVER use linked-list in your code again
This Week in Mobile Development January 29th – February 5th
How Can You Prepare a Perfect Presentation?
Git Bisect – Find by binary search the change that introduced a bug
SEEKING WORK - Remote

Experience: 4.5 years + 6 months in a startup

Technologies/Skills: UI, UX, iOS, Android, Web, HTML & CSS

Portfolio: http://radesign.in/portfolio

Blog: http://radesign.in/blog

Email: http://radesign.in/contact
The worst has surely got to be the 'Buckets for the Cure' campaign by KFC.

http://media.onsugar.com/files/2010/04/16/5/301/3019466/0d0b...
MyBroadband is a joke. Anyone who takes their news articles seriously probably also reads the Daily Sun religiously.
You can still build your server the same way. I fact, with SPA:s and REST, the server becomes way saner.
Tessa vs. Nina nude wet wrestling – XVIDEOS.COM
I could be missing something, but the code at that link looks seriously insecure. Using sha(secret + parameters) as a MAC is the classic pattern vulnerable to length extension attacks; the self-delimiting nature of JSON might save you, except various parameters are concatenated together with no delimiter, so you might be able to move data from one to another and make it work anyway. In practice this is unlikely to be exploitable as the whole thing is over SSL, but any case, using a HMAC to avoid length extension is basic security engineering stuff.
Let's hope the answer on Stackflow reads 'its in built services'. Precision in English is important too. 'It's in built services' is gibberish.
Just get out. They're exploiting you. Leave, start your own consultancy, poach their clients. You'll probably be surprised how much they're willing to pay.
Test-Driven Development with Python by Harry Percival is kind of a Python/Django equivalent to the Ruby/Rails Tutorial. http://chimera.labs.oreilly.com/books/1234000000754
It's true, he couldn't throw the ball or tackle but he was the coach, the playmaker, and a damn fine one.
ah, just added it. may you please ? thank you !
> Enterprise sales people can make a habit of selling things that the product can't currently do, and then forcing engineering to make it a reality

In my experience, this happens because sales people come to the engineers and say "can we do [mad thing]?" and, engineers being engineers, go "yeah, sure, [possibly adding detail and constraints but the sales people stopped listening at 'yeah']". I've seen this many, many times.

Default answer out of any engineer's mouth should be "No." with optional coda of "But if you can tell me more about it, we might get to maybe."
This is a significant turnaround, because top infrastructure people including Urs had been saying that arm cores would never be sufficient for single-threaded performance[1] and most recently we thought they were supporting OpenPower as competition to intel.[2]

> Google, which purchases as many as 300,000 processors every quarter for servers it manufactures, has greater buying power than most.

Good lord!

[1] http://www.computer.org/csdl/mags/mi/2010/04/mmi2010040020-a...

[2] http://www.nextplatform.com/2015/03/18/google-looks-ahead-to...

Background, great book "The Datacenter as a Computer": http://www.morganclaypool.com/doi/abs/10.2200/S00516ED2V01Y2...
Yes exactly besides that. What makes you feel your data is public that its better to host on a public tracker?

Because all those earlier breaches(which you are referring to) revealed customer info not their data. If this was your point of user info, I wouldn't have asked.
Service workers and base URIs
Not if you use clipping-paths in the canvas, or if you want to partially overlay the video with canvas elements.
‘Error 53’ fury mounts as Apple software update threatens to kill your iPhone 6
Mastercard API
Developing a Static Site Generator Workflow
> The best thing for Apple to do is to re-take their

> position as a leader of software quality before it’s too

> late: consumers know that Apple’s hardware is the very

> best, but more and more they’re using apps made by Google

> and Microsoft and Facebook.

I'm not sure whether it's not too late already. I switched last fall to an Android phone using only iPhones before that. (I just didn't see the point anymore in paying 2x for an iPhone, which can't do anything better). I started using Google apps like Inbox, Google Calendar, Google Keep, Google Now, Google Fit and now, even I would go back to an iPhone today, there is no way, I'll use Apple Apps again (not as they are today).
That's why it's always a good idea to look into other frameworks and languages :)

I had to do some Java stuff in university so I knew the concept of dependency injection. But in JavaScript it isn't used that often.

Probably because "classes" are simply functions there and you can store a function in a variable and pass it around without thinking about its "real" name, which already decouples things quite nicely.
Nothing wrong with those stereotypes :D I have a feeling i'd be right at home in the wilderness of Scandinavia.
Since the VISA API seems of interest, MasterCard also has one. I wrote about a particular use case for these APIs, and other commercial ones, in a blog post [1].

TLDR: You need to be a "verified partner" or be sponsored to use VISA or MasterCard APIs.

[1] https://ksred.me/post/a-deeper-look-at-integrating-payments/
Quite a lot of people (myself including) just use v3 regardless.

I honestly think Jon Skinner could just release the next version as 3.0 and few people would mind since most people treat the current beta as an RC anyway.
The question, why many scientific communities haven't been racing to adopt Big Data technology is a tough one. Whether or not utilization is a major factor I can't really say. For Cuneiform, we have assumed that the major obstacle for using platforms like Hadoop or Spark directly is that these systems require a library to have a Java or Scala interface. If your software is written in, say, Python you need to either

- write a wrapper (an approach taken by Crossbow [1], SeqPig [2], or BioPig [3])

- reimplement (an approach taken by CloudBurst [4] or ADAM [5])

Reimplementing a whole pipeline represents a huge upfront cost. Writing wrappers is more feasible and, accordingly, a huge amount of custom tailored pipelines and ad-hoc worklfow systems have emerged recently. So if it boils down to wrapping libraries and running them on Hadoop, then we need to make this as easy as somehow possible. Cuneiform is a step in this direction.

[1] http://bowtie-bio.sourceforge.net/crossbow/index.shtml
[2] http://bioinformatics.oxfordjournals.org/content/30/1/119.lo...
[3] http://bioinformatics.oxfordjournals.org/content/early/2013/...
[4] http://www.ncbi.nlm.nih.gov/pmc/articles/PMC2682523/
[5] http://bdgenomics.org/projects/adam/
Well, something more nefarious is already possible with a bit of money. Someone could hide a few armed drones set to wake up 100 years from now, setted up to shoot everyone they find. The perfect crime in the sense that police can't capture him if he is already dead.
cough Arthur C Clarke's _3001_ cough
sdcc is the only(viable?) foss option for many 8-bit/older architectures. 8051, z80, stm8 are what I've used it for. A lot of newer chips(example many of TI cc2xxx SoCs) actually have 8051 still, stm8 is newer entry(I think).
UUIDs are less efficient in databases though, so that isn't complete bollocks.

* At 128 bits they are larger than the majority of integer types. If you are using them as keys for large data sets this might be a concern, especially if you are using them in a clustering key in SQL Server or similar because every non-clustered index entry would include the larger value too (a table with four extra indexes: that is 40 extra bytes per row if you have a UUID clustering key over a 64-bit integer, 60 extra compared to a 32 bit integer - if you have many millions or billions of rows that is worth considering).

* Unless using some tweak such as SQL Server's sequential UUIDs they result in significant fragmentation (assuming a b+tree index structure with allocation and cleanup semantics similar to SQL Server, other DBs may manage things differently) due to their effective randomness, which wastes storage space & memory and can therefore impose greater IO and RAM load beyond that implied by the difference in size.

UUIDs are great when you genuinely need them, but often an integer type is much more efficient so refrain from using them where you don't have a specific need to.

The article and the services described are definitely satire though.
previous discussion

https://news.ycombinator.com/item?id=11037524
The annoying thing about this is that this article is quite old now and nothing in it was new when it was first written yet roads are still designed in ways that promote the faulty competitive behaviour.

By the way, I'm not arguing that there is anything wrong with the article, it's good, well written and nicely argued.
cough Sky Captain and the World of Tomorrow cough
I think one of the reasons is that they only have a small number of datacenters, have a small number of (very friendly) staff and are not going after the mass market like DO, and I guess they don't spend anything on marketing.
Why bother putting so much time and effort to release something this bad?

Because the executive committee has no understanding of why they need a "good" API, and no appetite for the difficult journey they need to embark on to create one, but they just have to do "something", and they're happy with "anything". That's my bet.

The largest player in the market just entered the API arms race, years late and with pockets deeper than any of their rivals. Yet two brothers from Ireland are still the best game in town.
> They are bunch of very sad, very pathetic wankers. Their job has less meaning than any other job I can think of.

I would love to solve the problems that one would encounter in this industry if I did not have to avoid it for moral reasons.
Something seems to be wrong with how Chrome renders this:
http://imgur.com/a/z1tLz
It's a shame the article does not have any content at all about how it was like working with Steve Jobs. It's an article about the design process they used, with very little info anyway.
My journey from the front end to the back end
Edward Snowden: The Whistleblower Fantasy
This stuff makes me drool.

I remember being in the Norwich Cathedral a couple of years ago, and getting a tour of the graffiti. Some of it was just regular lampooning of authority figures, young guys letting off steam, that sort of thing, but some of it was kind of nuts. Apparently this pattern known as the "daisywheel"[1] shows up all over the place, and no one knows exactly what it means.

While we were there, the person showing us around flipped up one of the seats to show us the "green man" who'd been carved in lavish detail on the underside of the seat. As we looked at it, one of the cathedral workers came chugging down the aisle, flipped the seat back down, and continued on, all the while grumbling bitterly but incoherently. Apparently they're not too keen on the green man...

[1] http://www.heritageopendays.org.uk/blog/medieval-graffiti-at..., http://www.dailymail.co.uk/news/article-2274401/Archaeologis...
This is my biggest worry about using this service. It looks great, but if they don't make any money, how can they keep it running for free in the long term? They should charge users money for storage, not give it away for free - hopefully they have a plan to do so soon but they should make that clear.

It would also be nice to be able to completely self-host, that would be really reassuring, not sure if it is possible but they could certainly sell that as a service and support it for businesses interested in running their own keyserver and encrypted file store.
The best game to ever come out of South Africa is called "Grand Theft Country". Absolutely brilliant game. The aim of the game is to become President of the country with a few sub quests along the way:

- Build a mansion/estate for a few million. Special side quest: include an enormous swimming pool with the stated aim of it being used as a backup fire hydrant

- Buy a new Presidents jet for a few billion

- Go on trial (and exonerated, of course) for rape and have unprotected sex with someone that is HIV positive. Special side quest: claim that having a shower afterwards would protect you from contracting HIV

- Marry (at least) 6 women and garner a few mistresses along the way too

- Preside over widespread institutional corruption. Special side question: actually go on trial for bribery and corruption charges (and be exonerated of course)

- Devalue the currency as much as possible in the shortest possible time

- Cause ongoing power outages in the economic hub of the country on a regular basis

The game is built in a perpetual universe and the first of many expansion packs is due for release soon.
I've visited friends at their London office a bit. Fun place, a lot like the Google campus -- e.g. free food, Star Wars statues, Segways, etc. But high-ish security; any visitor gets a printed name badge that expires and changes colour after X hours.

I have no experience of their software, but the people I know who work there are very smart. Some of the best developers I've ever known. OTOH, many of the other best developers I've known refuse to work there on principle.
It's not the same, if the merchant's webserver is compromised they can just change the src attribute of the iframe to point to their card number collecting iframe that wraps the Stripe iframe. With the redirect method the customer can see in the URL bar where their card data is being sent to.
previous discussion

https://news.ycombinator.com/item?id=11038088
Wow, I didn't know that sublime forum had migrated to discourse platform. Looks great.
Pretty late here, but does anyone have any invites left? Super interesting project!

Email in my profile :)
I think this was the problem [1] was targeting
[1] http://engineeringblog.yelp.com/2016/01/dumb-init-an-init-fo...
Hey! Any invites left? (Email in profile)
I'm aware, but I was talking more in the practical sense.

The attacker can replace the iframe with his own and proxy it, or perhaps simply display an error and ask the user to re-insert his payment info into the actual stripe form.
I'd love one! I've been really excited about this project for over a year but still in the invite queue :(.
Every single one of the previous hacks was used to access customer VMs, except for the passwordless MySQL server they had.
I think its time to just move to using atom. To me its ahead of Sublime now.

Its clear that Sublime is no longer being developed as a priority like it used to.
By the way, you can use DockerSlim [1] to auto-generate custom seccomp profiles (in addition to shrinking your image). They are already usable, but they can be improved. Any enhancements or ideas are appreciated.

[1] http://dockersl.im
If ST 2 is any indication, it'll be in beta for a while longer, then 4.0 beta will start (paid upgrade) and 3 will no longer be developed. It's a bit of a silly way to monetize. I haven't actually gotten a license for 3 because of that, I'd rather not pay for beta software or for software that I know will hardly be maintained once out of beta.
The Gupta expansion pack is amazing.
Well, it's not meant to. Unless you want to process the credit cards yourself. You are comparing chalk and cheese.