skysight-inc/HackerNews huggingface dataset:
I live in a San Diego neighborhood built in the 20's along a street car line. It's about 3 miles from downtown.

(Edit: the streetcar is long gone, though there's a bar called Station nearby and a few other hints of its former existence).

It's not bad for SD, but the streets are wide and drivers blow through stop signs constantly. I can, at least, walk to several great bars, a small Target Express, and a few other amenities.

It's low to moderate density because the homeowners fight all new construction tooth and nail (I go to the planning meetings). There isn't a single bike lane in my community. Any time someone suggests building something they are told they have to build massive amounts of parking, so nothing gets built.

Of course, their charming cottage homes (which would be illegal to build now) are $700k to ~$1.1million, so it's great for the landowners. Not so much everyone else.

The people who live and vote here are mostly owners, so they have a very strong interest to fight any new construction, increasing the scarcity of their asset, and its value. I can't see how this changes so long as any area which is composed primarily of landowners can vote to make sure nobody else is allowed to build there.
You both assume that people only use applications installed via a "standard" installer, that sit in c:\program files (or whatever) and have proper menu entries.

I have 4 GB of random stuff under c:\apps of which some things have been copied over for nearly 10 years and countless windows installations. Also PortableApps, which don't sit in the start menu.
Berlin has a fantastic transit system. I was living almost in Potsdam, and I could get to Mitte in under an hour - and the trains and buses were almost always on the dot on schedule. Before I lived there for a few months, I had only really experienced the Boston T system, which is seemingly about as bad as a transit system can be and still be considered functional...
Law Graduate Who Sued Her School Loses at Trial
It's not just kids.

You can look at e-sports to find a similar theme. E-sports events now have 10s of millions of live viewers watching a single match that might have 10 players.

How many people watch the Superbowl compared to the number of people who buy footballs and go play with them outside?

How many viewer-hours are spent watching the Travel channel or consuming travel media (video, TV shows, blogs, etc) compared to the number of hours spent traveling?

What we're talking about is spectatorship. Spectatorship is nearly always an order of magnitude more popular than participation, because the barriers to entry are lower, because it's cheaper, and because humans are lazy and it's easier.

Organizations like the NFL make more of their income through advertising, merchandising, etc. than they does through ticket sales, why should video game direct sales vs spectatorship-related income be any different?

Let's plays could be seen as the viewer watching the Superbowl at home, while buying the game yourself is like being there in the stands or buying a football and playing yourself.

I don't blame primary content creators (game studios) for trying to capture some of this secondary/indirect market (re-streaming of the game / spectatorship). It's proving to potentially be a much larger market.
What does that mean? As far as I can tell, it's either saying that advertising has no effect whatsoever on the success of a product (which is obviously nonsense), or it's some weird circular prosperity-gospel thing where you declare that only good people/films make money, so any person/film that makes money is by definition good.
You can still be a horrible driver obeying the law.
previous

https://news.ycombinator.com/item?id=11348982
So in less than 24 hours, the world taught Tay to become a nazi genocide supporter... that makes me worried about future of AI. Give enough power to these auto-learning bots skynet is no longer a fantasy.
Yes, I really don't understand how this could not act as a sort of .. load balancer .. for my credit/debit cards. Why does it need to login to my bank account? This seems entirely unreasonable.
Do you have a link to the location of the CAD files for the Vive controllers, or are you talking about OpenVR render models that are obj format and, afaik, not suitable for 3D printing custom, real world, hardware.
Using Machine Learning to Read Electric Meters
I, a 37 year old man, had heard of infamous 2nd son but don't have a playstation.

So I googled a let's play just to check out the gameplay, intending to watch 5 minutes, and ended up watching pewdiepie play the whole game.

Be as disdainful and insulting all you want, but I found him funny, charming and thoroughly enjoyable, it let me watch the story like a film, but with a touch of the camaraderie of playing a game with friends like I used to when I was younger.
More Teachers Can't Afford to Live Where They Teach
It looks like funding is done via ACH. Does your business operate a credit operation as well to handle the risk of spending money and unable to complete the ACH transaction?

I've always wondered about the business side of that...where does the money come from, how is individual debt handled. Do you operate collections? How do you do this without requiring a credit check? etc..
This has been around in the US for quite a while in various forms, but it seems like it has never really caught on.
Look, I'm as left-leaning as anyone, but check the link. The timeline is chock full of stuff on oppression of leftists.
Trinity Desktop Environment R14.0.3 Released
Oy, I forgot about Texas. Things work differently there. It's clear, though, that my original statement was one of privilege: I'm not part of any of the more targeted communities. Still, can we expect intoxication to be more tolerated at the bus stop than it is anywhere else on the block? Perhaps the problem isn't so much giving LEOs discretion in writing citations, but rather it's having entirely too many LEOs in the first place. When they're busy with actual public safety work they won't have time for commemorative Stonewall Inn reenactments.
Ask HN: Who is still working on their YC app?
The Case of the Missing Faces (2015)
Well, except that a lot of the worst F2P mobile games are competitive multiplayer. If you cut out all the freeplay minnows, the whales don't have enough people to play against.
This was an inevitable consequence of Bernstein being one of the very few cryptographers simultaneously devoted to:

* Theoretical rigor

* Competitive performance ("new speed record for X" being a theme of his research)

* Misuse-resistant constructions and interfaces

He was doing this stuff before it was cool (he's as far as I can tell the only cryptographer to have written something like qmail) and the rest of the industry is struggling to catch up.

The list of Bernsteinisms is slightly less scary in context:

* Curve25519 and EdDSA are sort of related work, and the alternative in non-DJB cryptography would be "NIST P-curve and ECDSA over that P-curve". The consensus seems to be that Edwards curves are superior for a bunch of practical reasons, and Bernstein pioneered them, so: no surprise.

* Poly1305 and ChaCha20 are virtually never used independently; they can been seen as DJB's most current AEAD construction. There are plenty of competing AEADs; in fact, there's a competition (CAESAR) underway that DJB is involved in.

So really, that's not that much scarier than the fact that AES and SHA-3 share an author.
Agreed. The underlying assumption seems to be the employees at Google can spin up billion dollar businesses at will.

...which begs the question if I were able to spin up a billion dollar business at will, why would I work for salary and a minority equity stake at Google?
Will.i.am got Apple boom boom pow.
Are these people that would really be playing the game normally though? The barrier to entry to watching a lets play and buying and completing a game are miles apart.
It reminds me of The Terminator scene where the janitor asks, "Hey buddy, you got a dead cat in there, or what?"

https://www.youtube.com/watch?v=LUZgPfdkWis
One thing of note: though they do say it's "fully compatible with OpenSSH", it is not compatible with ed25519 keyed SSH, as Golang SSH does not support it.

Otherwise looks like a cleverly designed system. Being able to use a standard terminal emulator to connect would be nice though.
Emoji is plenty coherent, regardless of how the grandfather post might weep at its merits.
> There is really no reason to not do this unless performance is important...

There are very few situations where performance is not important in cryptography, and those situations do not, generally speaking, have sufficiently unusual security requirements that it would make sense to use a completely different set of crypto primitives for them.
I got to watch this happen in real life to an autistic child who rode the school bus with me. Other children delighted in "teaching" him to swear and spout racist remarks.

It's not just the internet that's hateful.
"Also, most if not all US states are required to run a balanced budget. This can result in cuts when forecasted revenues don't match actuals. The Federal government simply borrows more money and kicks the can down the road."

This is a misnomer that I see quite frequently: "states must run a balanced budget" and it leads to the exact terrible conclusion you came to: "only the federal government kicks the can down the road".

This is totally wrong. State governments can and do assume debt (generally issue municipal bonds) to cover short term deficits. They play funny money all over their budgets so they can mask what they're doing, but when states like Kansas cut hundreds of millions of highway funding to plug budget deficits, then repeal laws on debt caps and make the department of transportation issue record levels of debt to continue those projects, that's what they're doing. They're taking debt (issuing bonds) to plug deficit holes caused by lowering taxes.
“There will be no Typelevel event @Lambda_Conf if [Yarvin's] invitation stands”
Any apartment or house old enough to have plaster walls will be much more soundproof. That stuff is dense and heavy and it's usually at least an inch thick, more than sheetrock/drywall.
Disclaimer : Not a sympathizer or anything of that sort. Just curious.

Why should the AI be politically correct and be 'nice'/ state what is accepted by the larger part of the society ? Isn't it possible that Tay is just doing a mini Donald Trump ?
Is it this? from the comments

http://blog.cryptographyengineering.com/2016/03/attack-of-we...

> Apple iMessage, as implemented in versions of iOS prior to 9.3 and Mac OS X prior to 10.11.4, contains serious flaws in the encryption mechanism that could allow an attacker -- who obtains iMessage ciphertexts -- to decrypt the payload of certain attachment messages via a slow but remote and silent attack, provided that one sender or recipient device is online. While capturing encrypted messages is difficult in practice on recent iOS devices, thanks to certificate pinning, it could still be conducted by a nation state attacker or a hacker with access to Apple's servers. You should probably patch now.
> a physical credit card that I can use in the real-world that has a new number on each swipe

We have that already (chip cards, which are currently being rolled out in the US and already standard in the rest of the world, generate a new single-use token for every transaction).

https://en.wikipedia.org/wiki/EMV
Ask HN: What is the Open API Initiative missing?
Link here: https://openapis.org/
Export Bitcoin TransX to PDF and Cool API
Since cryptosystems designed by experts virtually never use cipher cascades, having one is a pretty good indicator that your system hasn't been designed by an expert.

More importantly: Guttman's argument isn't that it's unsafe that we have this "monoculture" (how would that work? DJB turns evil and reveals the secret trapdoor in Curve25519?) --- it's that it's sad that things ended up this way.
Is this Final without a physical card?

https://getfinal.com/
Thanks, that makes sense, except I have no idea what "1st party featuring" is. It's not a term that seems amenable to googling, either.
Show HN: WeCare – Care coordination platform
Which is why Amex can offer such great rewards, because they charge vendors through the nose.
Unfortunately it seems to be a general issue now.

Stripe used to be attractive, particularly for smaller and/or newer businesses, because of the rapid set-up and hands-off approach, the developer-friendly API, their famously well-presented and well-maintained documentation, immediate responses by in-the-loop staff to support questions, and generally a "we get it" kind of attitude that felt like working with a peer who understands your concerns.

Sadly, in recent times those seem to have given way to an ever-changing and sometimes breaking API, quite often incorrect or incomplete documentation, almost copy-and-paste half-responses sometimes arriving days after the original mail (or not), and generally an "if you're going through these channels, you probably aren't that important" kind of vibe.

The thing is, without those developer-friendly, real-person characteristics, what is left for a small business is mostly just another payments service with higher than average fees, a crazy high failed transaction rate in our experience (YMMV), and below par anti-fraud and security options. (Edit: They also seem to have had a lot of minor outages around their API recently, which don't always seem to be reflected in their pretty mostly-green status display.) There is a lot more competition in the payments space than there was even just a few years ago, both for processing services and for the payment methods themselves, and others do some or all of these things better today.

It seems clear at this point that Stripe have become victims of their own well-deserved success, and it looks like their focus has shifted to larger and presumably more lucrative businesses rather than the start-ups and side businesses where they established their reputation in the early days. That's an entirely understandable business move on their part, and I'm not going to criticise them for running a business like a business. However, objectively it also means they're no longer attractive for the smaller businesses in the way they once were.
At $9K/month, the difference between 2.9% and 2.5% rates is 0.004 * 9000 = $36/month.

If using Stripe's super-friendly APIs (and management portal) isn't worth $36/month to you compared to PayPal's APIs, that's certainly your choice.

The "widest" gap will be if you grow to doing just under Stripe's $80K/month cutoff for their first tier of rate discounts, paying them 2.9% while you'd be at 2.2% with PayPal. Here the difference is at most 0.007 * 80000 = $560/month. At that point, how much developer time is it worth investing for you to "recover" 0.7% of revenue? Or is there some better use of that valuable time to grow your business by 0.7% -- at which time you have access to more favorable rates from Stripe?

(Disclaimer: happily abandoned PayPal's API several years ago, using Stripe happily since then! Maybe PayPal has improved, I don't know.)
The HTTP API is relatively simple to work with actually. Here is a quick example on how to work with it in NodeJS:

var request = require('request')

var file = require('fs').readFileSync('./testimage.png').toString('base64')

var body = {
requests: {
image: {
content: file
},
features: [
{
type: 'TEXT_DETECTION',
maxResults: 10
}
]
}
}

var url = 'https://vision.googleapis.com/v1/images:annotate\?key\=your_api_key'

request({
url: url,
method: 'POST',
body: JSON.stringify(body)
}, (err, res, body) => {
console.log(err)
console.log(body)
console.log(JSON.parse(body).responses[0].textAnnotations[0].description)
})

Basically you want to convert image data into base64, put it in the requests.image.content field and make a POST request and you'll get back the text.
Not only that, it has made it so that French users are only able to use Google.fr. Until a few weeks ago they could use Google.com as well. Now they would need to use VPN to do that.
Typelevel does a great job at destroying the scala community.
I work for the NYC branch of a Swedish company.

1. Salaries will be lower in Stockholm compared to NY. You are also taxed more but you will end up saving more because cost of living is cheaper than NY.

2. Finding an apartment in Stockholm is hard. Not SF hard. But hard. Typically apartments are furnished and as a New Yorker, look bigger to me than the ones here.

3. Public transport (within Stockholm) is pretty damn good. Most people either live close by to our Stockholm office and walk, take the train or some even bike. I believe I know some who have cars.

4. Swedish culture is typically very egalitarian. This is after all the land where you can in theory find out your coworker's salary. So I don't think you are likely to get paid significantly less than your peers. However, negotiations depend more on the culture of your company.

Good Luck!
Well, when you make a product that's more like a movie than a game (two-hour linear story where you experience everything by watching a video), then the public will treat it more like a movie than a game. It's even priced like a movie - $15 for 2 hours of content. The problem isn't the Let's Play world, the problem is that the product is an edge case. The article sort of skims right by this issue while recognising it: And for games with more expansive or replayable gameplay, it can directly benefit developers. There's your problem right there - you 'made a movie, not a game', and released it through gaming channels.

Another point is that there are literally tens of thousands of games out there, and people use Let's Play not just for entertainment, but to see if a game is any good before purchasing. Essentially they use it for demo-ing the product, and if your game and your 'demo' are essentially the same thing, then that's a bad business decision, regardless of how much soul you poured into the product. Harsh, but if you're complaining from a business point of view, then you have to deal with harsh realities.

For my own experience, I saw it crop up, and thought "Why would I want to spend $15 for a short game about cancer?". I was curious about it, but not so curious as to drop $15... or even search out a Let's Play myself. I imagine most of the Let's Play audience were similar - suggesting that $1/viewer is somewhat realistic recovery for lost sales... that's nonsense, in my opinion.

Finally, a bonus problem: When your game is two hours long and you distribute through Steam, which has a no-questions-asked refund policy for 2 hours or less of gameplay, then a lot of those casual viewers you're after will just take that money back.
Don't run commands you don't really understand
The valve controller seriously needs this, the driver/steam integration is badly broken.
I'm pretty sure the open source community can do better.
Should Iranian internet restrictions apply in France? Chinese? If not, what's the distinction?
I doubt devit was suggesting we stop analyzing the individual methods. If we (and to use a really stupid simple example on largely insecure functions because I'm a simpleton) hash something with...

sha1(md5(things))

We can both study the relative security of sha1() and md5() separately, but also know that using both means that an attacker must defeat both methods. This isn't security by obscurity so much as security insurance. If either sha1() or md5() is compromised, the data is still protected by the other.

Similarly, if we use ten different encryption methods on top of each other... we know a few things:

- If we're studying all of those methods for flaws, the initial challenge of beating it is defeating all ten methods.
- If a method is found to be compromised, our data is still protected by nine other methods.
- At the very least, we've made brute forcing this a pain in the rear, because nine of those ten layers' output is probably really hard to tell are correct.

If you have a crypto 'stack' of ten methods, and you find one is now easy to compromise, you can napkin math realize you've lost one layer of protection, so when a zero day happens on one method, you don't have to panic and assume all of your data is compromised.

But your goal remains to ensure as many of those individual layers work against 'guns and explosives'.
This is Hacker News. JavaScript should be added by users as a browser extension. Only requests to make the website more user-serviceable such as class names and element names/IDs should be considered.
Just to list a few:

- Stripe

- Braintree

- Adyen

- Paypal

- Wells Fargo Merchant Services

- Chase Paymentech

- Vantiv (acquired Litle)

- Forte (acquired ACH Direct)

- WorldPay

- Skrill

- Moneris

- Coinbase

- AMEX

- Auth.net

Stripe is probably your best bet, but should you decide to choose anyone else, let me know if you'd like any help as I've integrated with most of these processors before :)

PS: Ultimately your decision should come down to your card blend, i.e., if you process mainly debit cards (Durbin regulated and basically zero interchange), go with a processor who will offer you interchange-plus pricing. If you process mostly premium cards, go with a processor who will offer you a blended rate, since they'll probably be eating their AMEX transaction fees (typically around 3.5%).
Screw npm – it's time for change
Ironically though, doesn't slack HAVE a way to reference messages? You just copy a link to the post you want to reference.
Nowadays there is ARM SBSA which aims to resolve the problems and allow a PC-like product to be built (the main reason such a thing didn't exist before is lack of interest). In the meantime the GPL helps to ensure at least the source code for the drivers for the Linux kernel are revealed.

BTW, notice the "server" in the ARM SBSA name.
Is nobody else surprised that a techie (Sam Altman) can use the term PR without qualifying that he doesn't mean github. In Swedish it's called 'yrkesskadad' - occupational damage.
Tay.ai is a product of Microsoft. Corporations avoid controversy because negative publicity affects profitability. It is not possible that the AI is using inflammatory speech to attract a certain subset of American voters because Tay.ai is not running for President.
Spreadsheets somehow hit a vein with the public, so that tells you something. I've been kind of obsessed with the Tup build system, and in trying to distill what it does into one sentence, I find it helpful to say, It's like a spreadsheet for files, where the formulas are shell commands. Even though I can grok FRP on its own, I still find that analogy helpful.
It's worth noting that the Let's Play folks actually add something to the experience. I'm not much of a watcher, but I started watching vegeta311 play Dark Souls on youtube, and before I knew it, 6 hours had passed. I was amazed at the guy's seemingly-casual skill - I'd sunk many hours into Dark Souls, but it was the skill I was watching for, not the game.
How would they "encrypt" them that wouldn't be trivial to undo?

I think people aren't concerned about it because it doesn't make sense to try to put secrets into container images. Whatever you're using to deploy your Docker containers should make those secrets available to the appropriate instances at runtime. This is how Kubernetes handles secrets and provides them.

http://kubernetes.io/docs/user-guide/secrets/

(For example, what if you have two instances of a service and they need to have different SSL certs? Are you going to maintain two different containers that have different certs? Or would you have a generic container and mount the appropriate SSL cert as a volume at runtime?)
Can you speak to the strengths and weaknesses of any of these?