skysight-inc/HackerNews huggingface dataset:
Me, I'm paid to translate someone's idea from one language to another. The value to the business is already understood by the one conveying the original idea. My only job is to ensure that the entity on the other side fully understands what was originally communicated without hinderance through language barriers.
Election should be repeated until the proper candidate will win.
Everardo Herrera
> This is common practice in germany. The whole payment methode "sofortüberweisung" or "sofort" is based on this.

I've never used that and only one person I know did use it ever. And even that person felt rather uncomfortable about it. So I don't think it's very common.

A year ago or so it was also exposed that sofortüberweisung doesn't only do the transfer, they actually retrieve details of all recent transfers.
I wonder about that...I could see it as strategically valuable for Google to have the Vive succeed and the Rift fail.

If the Rift took over somehow (doubtful at this point) FB having control over its ecosystem would be bad news for Google because AR and VR are the future of where digital eyeballs will be.
No, the rules aren't per interface and there's no authentication of a new network device.
You delete the directory to get rid of the pieces.
ViaSat already moved their launch of ViaSat 2 from SpaceX to a competing French company, primarily due to delays although I had heard it was due to the recent rash of SpaceX launch failures.

Telecoms customers aren't worried about Musk stealing their technology, but they are worried that his satellites don't dependably launch on time, much less not explode.

Lost in the Elon circlejerk is the fact that SpaceX is not even the best private launch company at the moment, and that low earth telecom satellites, a la SpaceX and FaceBook, trade reduced latency for a host of other challenges - there's a reason this hasn't been done before and it won't be the best solution for all markets even if it succeeds.
> So wait, what more does Rust's static analyzer give us again? Does it somehow remove the need for refcounting heap objects?

Refcounting is rarely needed because most sharing is done via "borrows", which usually work via scope-tied "references" which may point to either the stack or the heap.

Implementing and enforcing local scope pointers in C++ via static analysis is not hard. Making it possible to thread borrows through APIs and annotate things with the borrowing semantics (which is what makes Rust avoid refcounting or even allocation costs) requires a bit more work.

> I have no attachment to the "traditional" C++ programming style.

Right, but at this point you have a very weird looking subset of C++ that can't seamlessly integrate with other libraries, and can't be translated to from regular C++ without significant human intervention -- why not just use Rust?

> Why? The static analyzer has an opinion on whether or not a program is safe. The optimizer just wants to know if it still thinks it's safe when you remove a runtime check.

I guess I misunderstood your proposal. This sounds doable. But, again, you'd be using a weird subset of C++ that doesn't seamlessly integrate, and you're just better off using Rust at this point.

Instead of trying to port Rust's guarantees to C++ it makes more sense to use the same principles to organically build on top of C++, in a different way. IMO this is sort of what ISOCPP is trying to do, but they're not quite there yet, and trying to find a compromise between making the language too different and making it safe is hard.

> So the question becomes, what do you do in the many cases where the static analyzer doesn't know if it's safe or not. You can try to redesign your code so the static analyzer can understand that it's safe.

This is always going to be a problem regardless of the static analyzer. You have to design it to reject these cases. Rust does this too; there are some edge cases where you need to design around the borrow checker (though usually this doesn't incur additional cost, and the most common of these are going to be addressed). If designing low level abstractions like vectors and stuff (or doing FFI), Rust gives you an escape hatch ("unsafe"), which has a couple of checks disabled and can be used to write the code you need (verifying safety of a program then just requires verifying that these blocks of code are sound and do not rely on any invariants that can be broken by code outside of them).
Five years ago I loved asana for its simplicity. I tried it again maybe a year ago and was shocked at how unfamiliar it felt. Haven't gone back. Just use pen and Paper now.
What determines the validity of an opinion?
This is how most ecommerce works in Lithuania too. Debit cards (vs credit cards) typically didn't allow online transactions until last year, so most ecommerce companies just do this - there are only 3 or 4 major banks, so for the user it's pretty easy. I assume the fees are lower for the business too.

The only downside is if you don't have a local bank account (i.e. as a foreigner) you can't use it.

2FA is done by a) paper code b) passcode generator fob or c) mobile signature, which uses your SIM which holds an RSA key (it doesn't use SMS):

https://en.m.wikipedia.org/wiki/Mobile_signature
https://dealomni.com which helps you find deals near you.

Proud because of what I didn't do. I was pragmatic. Avoided fancy nosql databases and funky languages and just bashed out some JS and said stuff it ... no server side!
don't forget travis-ci's web frontend:

repo: https://github.com/travis-ci/travis-web
site: https://ember-canary.travis-ci.org/emberjs/ember.js/builds/1...

It even has a version that tracks commit by commit right off ember#master https://ember-canary.travis-ci.org/emberjs/ember.js/builds/1...
Monumental
http://voices.nationalgeographic.com/2013/03/20/concrete-can...

> A Concrete Canvas shelter would cost 15,000 to 20,000 pounds, in the U.K., for a one-off ($23,000 to $30,000), but the price steps down if you are buying volumes.

My guess is that they're not interested in dealing with small-volume customers, and so for large volumes the prices descend to a much saner price. "Look at how much your government/military/refuge 'saves' when you buy 1000 of these!"...
Yet... And once you can leverage the power of the cloud for rendering that makes VR a much more portable proposition.
I would also really like to hear stories like this. Was so enthralled by Leo's post I ended up making a template for derisking: https://blog.codecorps.org/lower-your-startup-risk-with-this...

These are learnings that doesn't just flit by me. They're not filler. They profoundly change the way I work precisely because of the depth and detail, along with their actionability. Applied learning is by far what I want to hear.
You need to activate the next block of TANs with one of the previous.
addyo@, samccone@, and slightlyoff@ gave talks at Chrome Dev Summit last week about exactly this topic (and plugged Preact while they were at it). The average load time on mobile right now is 19s. (I think they were citing a DoubleClick study.) The Chrome dev rel team is in the midst of a big educational push around these topics right now, because pages are getting more complex, but median devices and networks are actually getting slower as more low-end devices enter the market.

As I recall, one of the other stats they cited is that mobile traffic is outpacing desktop traffic, so unless you're designing an app that really only works on a large screen, your users may be more mobile than you imagine. Facebook is a desktop site (most of their mobile traffic is in native apps), so they don't have the same incentives to optimize React for mobile that other developers might.
It can't be all that important to you if you couldn't even remember if it was installed.
Awesome. Best of luck with the product.
The EU cap is 0.2% for debit cards, so for transactions under €150, everyone gets that super Costco rate or less. Alternatively, the cap can be set to €0.05.

The card companies still appear to be making good profits.

http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv%3...
It depends on who and how you want to deploy it, but chocalatey may be a good option. You distribute apps as nuget packages (which are just zip files).

For the server side there's octopus, which I've been very impressed by, also done via nuget packages.
I should add to the Urban Dictionary 'Is that a Facebook joke? - said in response to any sub-par attempt at humour.'

This is my standard line for those that spend too long on Facebook and believe that nothing in the mainstream media should be read under any circumstances whatsoever lest the propaganda lead to brainwashing.

My snarky response to someone's effort at being funny by repeating some drivel they read on one of their friend's pages is a bit miserable but it condenses everything I feel about how Facebook is a waste of time and quite dangerous for one's personality makeup. There is no need to have the discussion about why I am not on such things, opportunities arise for me to use the 'Is that a Facebook joke?' expression of sentiment.
> I'm surprised they aren't split testing the reward frequencies

Of course this is done. It is just slower than in the web as other people has pointed out you can't change things on the fly.

I worked for the gambling industry and we had a statistics department that take care of this kind of things. You try different machines and you have different local maximums:

- There is the machine for the slow player that is there all day. It gives back a lot of small rewards so people keep playing and playing. It doesn't makes so much money but makes sure that your section of machines (each section is from a different company) is never empty.

- There are hard machines for places like Las Vegas. People bets hard and expects big colorful prices.

- There are machines for the small town casinos. This machines are softer than the ones in Las Vegas. But also optimized for its target audience.

Then there is the amount of noise, your section of machines should look like is giving prices all the time. The design of the cabinet (in Mexico they have a place to put plates as people eats there).

Yes. It is serious business. And there are a million considerations that each company takes into account. A/B testing was there a lot before the web was a thing.
australia has https://www.polipayments.com/
It still doesn't have a good one for desktop apps.
Demand an Audit of the 2016 Presidential Election
Thanks so much, I was digging into this a few weeks ago eagerly and didn't find anything. Glad it's here now!
This becomes a huge problem when someone is linking you multiple tickets and you sit there waiting for asana to load. Even worse, I find that some basic features are still lacking such as the ability to strikethrough text.
1. Americans need to realize while we are told we have an economy based on Capitalism, and "allowing markets to operate freely"; it's just not.

2. I just have to look at the amout of lobbying MasterCard/Visa sends to Washington. Their lobbiests have their hands in everything.

3. The banks bailout in 2008. My god--this should stop people in their shoes. We don't have free markets. It's a mess.

All that free market wisdom is great, but we are far from that. I was truly shocked to learn any country had rates limited at 6%. Out of everything I read tonight; that I will remember tomorrow.

Our lovely cap at around 29% percent has always seemed userious.

Credit Card companies don't give a dam about reward card programs. They care about making profits.

They make a lot of money.

Europe does a lot of things better than the United States.

I wish we had a cap at interest rates of 6%--especially since "50% - 70% of consumers carry debt on their credit cards".

I remember getting my first credit card from my college, and thought, this could ruin my life. I can't say they ruined it, but I know plenty of people who were greatly affected by credit card debt. I will pass this along, if you decide to use a credit card, only use it for emergencies, and maybe starting a business. Always keep an eye on the worst case senerio--a chapter 7 bankruptcy. Not a chapter 11, or 13. A clean bankruptcy. You can take one every 10 years. If you play with credit cards, there will be a day when that rate goes from 2.9 percent to 29 percent. Or, when you lose that job, and have to rely on those lovely credit cards.
Yes, and? When you build a product hoping for bottom-up user adoption (as opposed to getting the CtO to make a company wide mandate) then its totally fair to do this. Half the hosting companies on earth have Disney and NewsCorp and Nike and Starbucks logos on their client pages because an employee used his work email to buy a $5 shared hosting account for his mom's blog.
If you put it into a smaller form factor such as USB sticks and drop them in the parking, you'll have a decent chance of getting inside that company. If you could make it very small then it could hide inside a iphone charging cable for example which looks completely harmless from outside.
Bots generated 20% of all election-related messages on Twitter
It's interesting to look at the maps in your link. It seems like Phyton is popular in more countries, but ruby IDs more popular where both are present.
Is there really a vulnerability in the sense of a security bug here? It's a cool demo of what happens if your computer is connected to an untrusted network, and a good lesson of why you always treat the network as untrusted.

It's doubly surprising that the reporter doesn't recognize that USB is used for wired networking, since Macbook Airs always use USB for that!
Technically, because enough people upvote it, up to a level that makes it visible on the front page.

And it appears that this feature, although not new in the world of Trello, Microsoft Teams, GitLab cards, is new for Asana: "With this initial version of Boards, visual thinkers can now organize and track their work from within Asana."
IIRC the Chinese government will subsidize exports from china.
John Oliver gave them a shoutout on the last show of the year.

They will be sorely needed...
> They voluntarily choose to enter into unfavorable financial transactions (i.e. make -EV bets).

No. They are uneducated and they need help. They are not making rational decisions as described, they are navigating by their feelings.

I helped provide social welfare for people like this in a side gig. One woman was just the _nicest_ you could ever meet; she helped everyone. But when she stepped into a casino, something in her subconscious told her that the universe was finally going to reward her goodness.

I still try to stay in touch with her daughter, who graduated from high school as a homeless kid.

The family was terribly affected. But I still sympathize with the mom. She didn't voluntarily choose this problem. It doesn't even take sophisticated software to manipulate her. People continue to help her move forward, though, and she can change and is mostly OK these days.

> That's the purpose of the entire field of marketing

I disagree; that's simply black and white thinking. If you hear "let's sell people something" and think, "oh, they want to exploit somebody," that's not how it actually works; it's just your perception. Do _some_ people and organizations work in an exploitative way? Sure. Do they all? No. I just don't believe that putting out the guy with the sandwich board equates with manipulation, or that any manipulation is all of the same degree.

The HN audience converges with the audience that absolutely despises marketing; this is due to their preferred cognitive toolset which is very analytical and uncomfortable with the power of emotion. Others have different toolsets. They see marketing as a way to get people on both ends of a deal good outcomes in a mostly-good world.

> I personally hate marketing

I wouldn't trust that; marketing is just a reflection of human cognitive functions which are probably not a preferred part of your personal approach to life. A huge segment of society sees it as a way to move forward productively, even though it does carry risk like anything else.
your comment creates strong emotions in me,
it's a RESTless api tool should be a sufficient answer
It's actually more likely to happen than ever:

https://en.wikipedia.org/wiki/National_Popular_Vote_Intersta...

But, ditching the electoral college is only a small part of the solution to the core problems in US politics.
I posted a related story here:

https://news.ycombinator.com/item?id=12975066
I almost think there should be a divorce. Call it systemdOS and be done with it. At that point every service it subsumes will be seen as a step closer to the obvious end-goal rather than a point of contention. And the other OS can be something like the Gnome2 fork MATE.

It's not a technical thing, it's cultural. The two sides are playing tug-of-war with the same OS, and systemd's winning, but maybe it would be better to have a positive culture around the changes they're making instead of always having people dragging on the rope. Some forks have been good in the past - EGCS/GCC for example.
This should surely stop the critics from saying systemd is doing too much and is bloatful.

No, but seriously I understand the reason why you'd want this, but what stops systemd from being divided into smaller modules? Like the Linux I'm used to.
Yeah, also happens in Latvia. Already for many years, many banks here and many online services provide you with this way of payment.
MSSQL is basically an OS of its own, and does a lot of things in its sandbox that you'd normally expect OS to provide (like really low-level memory management and I/O, and I think even threading is heavily customized) - and that's on Windows. So it wouldn't be surprising if that is the case on Linux also.
I haven't tried the Vive but I recently tried the Touch the Microsoft store at Stanford mall. Annoyingly enough they had a Vive in a glass display but didn't have both available to demo simultaneously.

The experience in that wizard duel game was pretty immersive, and it was cool to kind of be able to wiggle your fingers. How would you compare the oculus experience to the Vive given that it still isn't room scale VR?
Wow! I'm super impressed by what Samy Kamkar managed to pull off.
Let's discuss mitigation on Linux because I don't want to cement the USB ports on my shiny new laptop just yet.

Some suggestions:

* When the GUI is locked, activating new USB devices or even activating a connection via a cable to the ethernet port should be delayed until it is unlocked and (optionally) the user confirms that it's ok.

* New unknown network devices should require confirmation

* A network interface that announces a subnet larger than /24 or /16 (for IPv4) should require a confirmation by the user.

What scripts and hooks are being called whenever there is a change to USB and networking? That would be the place to start. Can there be a /etc/udev/rules.d/ rule that matches all devices?
I would have thought the Doctrine of First Sale protects you legally (as in, they can't sue you for reselling a phone), but I don't think there's any legal protections on provision of a service.

Bottom line: Never rely on a corporation.
Backdoor computer and router in 30 seconds with $5 PoisonTap device
next week: looks like mk4p hasn't showed up... time for somebody to break in and feed his puppy?
https://hn.algolia.com/?query=PoisonTap&sort=byDate&dateRang...
I've talked with a friend working in the IT department of one of Austrias biggest banks (black + yellow colour ;) ) about it. Apparently, banks want to become the identification services of the future. The idea is, that you can only (not sure if that is true) open a bank account with a valid ID, therefore the bank login can identify if a person is real or not.
Example: creating a Twitter/FB account with you bank credentials would make your account automatically an approved account (you are you)
I think the unique attack vector here is that it's sufficient to just connect the device to the computer for a minute while it's locked. You can then unplug it and the attack persists.

The whole "left behind USB stick" attack is already somewhat known and may catch attention.
I love that they actually included Bigelow's explanation of each decision made. So often (especially in the realm of programming fonts, it seems) decisions on letter forms in new fonts seem to be made "because it looks nice", but there is, in fact, a science behind it all. Indeed, Go Mono ticks every item I look for in a programming font (one of only 2 or 3 programming fonts that does):
- slashed 0
- easy differentiation of 1, i, l, and |
- open lower-case g
- proper kerning and adequate width of r, n, and m

Unfortunately, I don't see myself switching away from Menlo to Go Mono for a silly and purely aesthetic reason: 5 point raised baseline * . Yes, yes...I know that's how pretty much every font has done * since forever, but after working with the vertically centered, six-pointed * in Menlo (and SF Mono), it's hard to go back.
As do I, hence my joke comment, which by the downvotes, didn't go down so well, bah.
There's not really any point in having rules you can't enforce. So unless you're going (and able) to penalize someone for down-voting inappropriately, just leave it to "democracy" and let each person cast their down-votes for whatever reason pleases them personally.
Well, given that they have all the login information (bank, user/account number, password/pin) they can basically access everything that is read-only and not TAN protected.

For my bank the transfers of the last month would be accessible right away, for example.

Honestly, I (German as well) didn't believe 1ris right of the bat and went to their website to prove someone wrong on the internet. Oh my was I wrong (apologies, 1ris). Horrible idea.
Intuitively, to be possible I think the target amount has to be divisible by the gcf of the two jugs.
Show HN: Chrome-Style Tabs in ES6 and CSS
Affiliate Marketing up 500.00 within an 1 – job posting
Not the original poster but in case it is interesting to you:

1. Arch Linux.

2. OpenSmtpd.

3. SpamPD

4. DkimProxy

5. Dovecot

This replaced a Postfix stack that I was using. I miss the use of Postgrey, the greylisting daemon, and I seem to get more spam because of this.
It's the same thing with network interfaces, isn't it? If you connect a rogue device to an existing ethernet port I think you could pull off most if not all of the attacks that PoisonTap does.
My working theory about this is that the industry is driven by resume-driven development. Recruiters filter resumes with a keyword based search : 'Do you have React experience ?', 'What about docker ?', 'Do you do Ruby on Rails ?'. If you cannot show experience in the current hotness, your chances in the job market diminishes. So people pick up the new hotness and implement their next solution with that technology whether or not it is the right tool for the job. If we fix the job market, this problem might automatically disappear.

Another solution could be encouraging personal projects. Many companies over-work their employees to the point that they cannot do anything in their spare time. Give employees free time and encourage them to play with new technology in their personal projects. The curious ones will have an outlet to channel their energies and you will get a rock solid stack. Also, they will be knowledgeable to take you forward when a problem that requires their newfound knowledge arises in your organization.
I'm surprised that people haven't commented on the implicit story here: the intention to deliver the "Shiny" cross-platform graphical toolkit for Go. If that happens, Go becomes one of the very few programming languages with a default cross-platform UI library.
I never sign up for newsletter, but I still receive plenty that I have to manually opt out.
Invalid email: http://imgur.com/a/Xo2mS

Wondering why people still check for 'valid' email addresses.
Outside of the US/Canada this stat is most likely the inverse.
You've described a lot of my vision for Sequiturs (https://sequiturs.com). Check it out! I'd be very interested to get your feedback.