skysight-inc/HackerNews huggingface dataset:
Ask HN: Is it safe to send credit card details via email (as WireX does)?
I recently signed up to WireX, a digital wallet/banking platform, based in London, that offers debit cards (virtual and plastic). They sent me the complete credit card details for my virtual VISA card (name, number, expiry, CCV) via normal unencrypted email (at my domain, not gmail to gmail or so), which I would still think to be somewhat of a no-no.

I understand that password resets often go to your email. But is it really considered best practice (or even just defensible) to send credit card details by email?

Edit to add: Website: https://wirexapp.com
Not advocating that software be converted from IBM mainframes (which IBM still maintains and still releases new hardware) to be converted to Windows.

How much software that is generally available only works on XP and that can't run in XP running on a VM?
For a point emitter it's 1/d^2. For a plane it's 1/d^0.
China, Addicted to Bootleg Software, Reels from Ransomware Attack
And 2017 is the time of Windows XP and WannaCry.

What I'm saying is, those things are all still running in prod. I got an employer off Java 6 just two weeks ago. The next step is all the Java packages that were deprecated 5 years ago.
Does one have freedom to enslave another?
Do I have freedom to get into a slavery contract (sale myself into slavery) with another person?

Do I have freedom to commit crime without repercussions?

Of course not. I have freedoms as long as they don't impede on freedoms of another fellow citizen in broadest sense, and fellow human being in restricted sense, in their pursuit of happiness and liberty.

Freedom to protect oneself from aggressor is basic human right. Guns is an extension of that right in modern era. Of course, nukes are not OK as individual weapon of choice. Without guns, basic human strength plays a disproportionate role in ensuring individuals right to self preservation against aggressor.

>Let's imagine each successful use of a gun to hurt oneself or someone else.

Let's.

Improper use of a tool hurt people and bystanders all the time. Guns are no different than cars, book shelves, swimming pools, knives, electricity and chemicals in this regard.

>How about each instance where a woman was raped at gunpoint

What's your point? Is he criminal in your mind because he has gun or because he is raping someone? Can you ensure in your gun-free world even criminals won't have guns? I don't understand this obsession to stand up for law abiding criminals. Ha raped her, but at least he wasn't at gun point. Whew! that was close.

>child killed himself

A gun hating friend of mine has a Shepard dog that my friend openly says is for protecting house and house members. The dog has hurt couple of kids but that's fine in his book, but a gun, oh, no, we must say no to guns. If guns have to go then all dogs above one feet height must go as well, each car must drive at 5 miles an hour and must come with padded cushions on the outside, each knife must be wooden, no metal knives.

>I happen to be convinced that one of the essential functions of a state is to maintain a monopoly on the use of force [0].

Which state isn't? The right to bear arm by common citizenry is hard fought and hard won right. I am not willing to outsource it to government because it makes it feel good. You could depend on police to save you in each and every situation, your call, I won't force you to own guns. But, you saying no one else should be able to defend themselves either is attack on those who want to. You are worse than the criminals who attack their victims.

For abortion, the right wing makes same arguments. They don't want to avail abortion in any situation and they want to remove that as a option from all other humans beings as well.

I am for abortion and for guns. Let people, individuals, decide what they want.
Consider that Amazon's systems are built from the ground up at a certain point in time, practices, technology, and costs that were "primed" for a solid decade of relevance.

Consider that at some point, even Amazon, will start to run into legacy cost given their size, and someone will swoop in.

Walmart is basically a decade behind when they built their supply chain and overall systems.

Once they fully automate their supply chain, it will probably buy them another decade of dominance, but then when better faster cheaper robots come...

Well, then we'll all be useless cogs for the AI mother
It can make things dark.
Have you seen the dimming windows in 787?
msoft is huge with tons of products. not surprising that something slipped by. why this is frontpage material is another question (but not surprising since people here seem to like it when msoft falls down).
This is an incredibly user-hostile attitude.

Also, you don't seem to understand. I'm not telling you to support gzip. If the browser doesn't support Brotli, then just send back uncompressed content.

And it's not just Safari. All sorts of tools that support HTTP don't support Brotli. Case in point, I ran `curl` against your page and got garbage back.
Intel's Management Engine is a security hazard; users need a way to disable it
It kind of blows my mind that even real, serious journalism outlets cheapen their product like this (nearing the mid-2000s music lyrics website threshold).

Got a NYT digital subscription to see if it was worth it, and I like it. Would be more likely to keep going if it extended to other publishers, and I could consistently access an ad-free, ad-blocker gate free experience.
It was inevitable :)

On a side note, as anyone who ran .NET/IIS in production knows, when the 500 page has an error (couldn't reach the session store, ran out of disk space, etc.) this would be shown with no way to remove it.

It made for so many unpleasant Saturday evenings...
I'm going out on a limb here, but perhaps it's your attitude. It comes through very clearly in your post, and likely a lot more so in person.

I've interviewed dozens of people over the years and the easiest way to be disqualified is to come across as being difficult to work with.

I understand your position, and your frustration, but I'm sure you could have found a more pleasant way to phrase what you said above.
I received multiple month's Prime credit for several 'same day' delivery items taking an extra day just a few weeks ago
Surely won't be AR/VR though. I still cannot imagine why regular people need them besides gaming. At least with smartphone you can browse the internet anytime. What is AR/VR's killer selling point??
Well said, the cumulative effect of the improvements will impact a lot of users. Great work.
I guess it could still make sense for tech-heavy, "we rewrite 50% of our code every month"-companies, like... Google?

Maybe they're mostly running their cloud to iron out the kinks im the API's they use themselves?
Should work with mpv at least (I dont use VLC). You can use the --hwdec=vaapi switch to make sure its on, which I believe also needs --vo=opengl for best performance.
Doesn't Windows have something like this built-in? WMI or something?
How comes a company like DaVita is legal in the US?
These are all valid points... but I'm curious what you mean by "better solutions exist now." Basically everybody's agreed to use a transpiler for the foreseeable future [0]. How is that not a workaround?

[0] This is my first time to see that any browser has actually shipped ES6 modules: http://caniuse.com/#feat=es6-module
Collider 3D printers can make shiny metal objects on demand
They cannot see who votes what though. They could threaten to kill one after the other, unless they're let in. Question is who is more susceptible to this threat, pilots or pax.

Would be worse than the current situation?
So the people that lose their jobs because of this suddenly need less subsidizing? Its become expected now... with min wage hikes, that businesses are turning to automation and cutting jobs... thats becoming the norm. Those people who now lost their jobs, you feel, are less of a burden?
It's similar to self-sealing fuel tanks in military aircraft. Those have a layer which expands when in contact with fuel, sealing the hole.
God, I hope so. Google Fiber is feet from my home, but refuses to lay cable. Those who got it seem to like it, but it looks like it's just too expensive for them to continue at this point. And that's in the city they started with!

ISPs are holding out though, when Google came into town the current monopoly "magically" came up with 3X speeds. (300mb/s). Seemingly out of nowhere.
"rustc is too slow" is possibly our most commonly-heard feedback. I am glad that you don't find it onerous, but many still do.
I like it! It's small additional effort for more precision. However, the estimation technique above is optimized for very small effort. You can do the very lightweight version in the middle of a conversation in your head without unduly derailing the conversation. It's a different tool with different trade offs. It's the keychain multitool of estimation methods.
See also https://news.ycombinator.com/item?id=14343480
which was also here on the front page but with a slightly different URL.
Power and influence, setting up your kids for that life, your grandkids for that life, or they just enjoy it.
I'm a little confused by this comment. Are you saying it would be better for the world if companies were limited to a "smaller human-resource pool"? Does anyone besides JS devs benefit from that scenario?
That's not good enough to work.

For a more complete answer: http://blogs.valvesoftware.com/abrash/why-you-wont-see-hard-...
Shameless plug: You can read free/libre editions of Confessions of an English Opium Eater and Suspiria de Profundis here:

https://standardebooks.org/ebooks/thomas-de-quincey/confessi...

https://standardebooks.org/ebooks/thomas-de-quincey/suspiria...

I found myself agreeing with this article re. his prose style. It's flashes of beauty surrounded by overlong, overcomplex arabesques of prose. Confessions is, I think, his best work, if only because I think his difficult life and the descriptions of Georgian-era drug culture make the density of the prose worth it.
The error is coming from IIS. There are several additional layers which could go down inc. CGI, Application Pool(s), Database(s), parts of the LAN (interconnecting different servers/services), or anything else the ASP.NET site relies upon (e.g. handle depletion, disk space, etc).

In IIS this is a "last resort" error when even the custom error handler cannot respond.
I was partly relying on the context offered by the article and my parent comment to imply that sure, Rust's compiler isn't the fastest in class, but the team has identified speed as a major outstanding problem and is working very actively to address it.

Compilers are pretty hard. Languages like C and Go are able to short circuit the problem by having a simplistic type system, but the Rust team's main option here is hard work, and so far they seem to be more than willing to engage in it.

> At best it can beat C++ compilers - C++ being a language whose build times people love to bemoan - but usually it does far worse.

Citation needed on that one. How can you even make that kind of comparison fairly?
I doubt that Windows users want the update process to interrupt them at the most inconvenient time possible.

The problem are not (security) updates themselves. The problem is the intrusive update process and non-security updates bringing "features" nobody asked for.
I need this immediately.
GNOME's, Xfce's, suckless', and many other web browsers are based on Webkit (WebKit2GTK+ or other ports) as well, and as far as I know none of them yet support brotli.

wget and curl both also fail to decompress your site's contents.

Same problem in netsurf, lynx, and links.
Let's be clear - the person who said there'd be no reason to write in anything else is an enthusiastic Rust user, but they don't work on Rust & don't represent "the Rust community."

Respectfully, the community has become increasingly vocal, and it's getting hard to separate the enthusiasm from realism. It's embedded in every HN thread. That's a good problem to have, but it can be a bit repellant to people who aren't Rust converts.

Thanks for the breakdown and future roadmap. I hope the compile times can be kept to a minimum in order to avoid C++'s fate.
In general one would say that, but there would be a category of local host that would mean "we don't trust this device to correctly update its firmware, so that action (and consequently most other network actions) is not allowed".
There's probably a pay wall after a certain amount of page visits. The other users should clear that cookie.
Reminds me of WSSQL [0] on Windows.

[0] https://msdn.microsoft.com/en-us/library/windows/desktop/bb2...
The error message could represent defective hardware. If we did our job right, that's about all it would ever indicate. There's few sane actions one could take in an exception handler to remediate the problem. I will agree that a better overall system design could detect this problem and rotate the defective nodes, though.

But in this case for all we know it could be a software defect from which there is no recovery. IMO it's bad to overdesign recovery mechanisms that just end up masking design errors. Clever staged rollouts of changes are good ways to mitigate the impact of a new regression.
There is nothing funny about a web service being down? Fuck. Everyone has downtime sometimes. 100% uptime is a fairy tale. Billion dollar businesses (like Microsoft) know this and try to hit lots of nines. This error is probably stressing the fuck out of a bunch of people right now. Someone might even lose their job. MS may have been hit by what in legal parlance is termed "an act of God". Who knows?
Once someone figures out how to roll it out cheaply - you can bet your bottom dollar all the other Internet providers will start rolling up offering a competitive services.

As long as they can ride an old cash cow un-challenged theres not much incentive to spend money to innovate their already dominated markets.
There's a great BBC TV series (and book) which covers exactly this topic: https://en.wikipedia.org/wiki/How_Buildings_Learn https://www.youtube.com/watch?v=AvEqfg2sIH0
A lot of the high-profile systems getting hit are embedded mission-critical systems. They'd be getting some amount of IT attention. And systems that aren't that important might not be important enough to ransom - just wipe and start over.
That page can be shown if you set up custom error pages and those too fail to work correctly, then it falls back to this as a last resort.
Cybersecurity Experts’ First Task: Find Out How Virus Spread
A lot of times MS will outsource these sites to vendors – I used to work for one. For people who don't know what it's like, it's basically a MS project manager making ridiculous demands on a very short time frame, which usually leads to shoddy products being delivered.

I'm not surprised in the least.
Have you filed a bug report asking Apple to support Brotli (https://bugreport.apple.com)?

And it's not just Safari. I think it's safe to say the overwhelming majority of software that issues HTTP requests does not support Brotli. And you're also not following the HTTP spec. Safari sends the Accept-Encoding header with a value of "gzip, deflate". If you're unwilling to support either of those, and unwilling to return an uncompressed response, then you SHOULD return a 406 (Not Acceptable) instead of just blindly returning Brotli-encoded data to a client that doesn't understand it.
Council Tax is more like a property tax, it's roughly based on the value of your property. Not your property because you're a renter? Too bad, the property tax is charged directly to you, the occupant! ;) (Maybe it's more like an occupancy tax that pays for some of the services your local council provides.)
Judge tells Uber to return Waymo files taken by engineer
The usefulness of a REPL depends a lot on the language/interpreter/vm. In Erlang and Elixir the REPL is more than nice to have. Being able to connect to a production node and peeking around what is happening can be very valuable.

I guess it's one of those things that's imho hard to appreciate if you never experienced it.
The usefulness of a REPL depends a lot on the language/interpreter/vm. In Erlang and Elixir the REPL is imo more than a nice to have. Being able to connect to a production node and peeking around what is happening can be very valuable.

I guess it's one of those things that's imho hard to appreciate if you never experienced it.
Your sign isn't the same they're talking about. But don't worry, I assumed the same initially.
+1. Also, Go's goroutines and channels.
Go deeper than most people in any programming topic and see for yourself.
Just Microsoft being Microsoft.

It hasn't even been 1 week since the last major incident.
The Big CSS Media Query Mistake
Not GP, but: not just people who disagree with me. People are influenced by what they're exposed to[0], and even if that effect is small on an individual level, in aggregate it can impact large portions of the population if you're able to manipulate the information that reaches people.

[0] https://en.wikipedia.org/wiki/Mere-exposure_effect
I'm pretty sure the early hydrogenated oils were created (Crisco, 1911) because they had similar and in some cases superior properties to animal fats and butter, but were cheaper and had a longer shelf life. The idea they were healthier came later.
Irrationalism? Err no.

Taleb expounds on his definition of the natural - anything that man has done for 100s of years without observing downside.

There is reasonable cause to believe that people are very interventionist in a lot of cases where all that is needed is letting the system sort itself out. Diabetes medication for instance (again - not in all cases): https://www.youtube.com/watch?v=da1vvigy5tQ

A lot of openness to low quality scientific work done in a lot of domains and our eagerness to think that anything with numbers slapped on it is better has given us wonderful gifts like high-fructose corn syrup, trans-fat, thalidomide (all within the last century).

The Taleb metric is just that a lot of systems don't respond in a linear fashion to random input. High levels of consumption of a substance only materialize with a delay of a few decades in horrible ways and the negative result can undo all the positives over the duration of the use of said substance. Thus is it important to err on the side of those things that have been (i) well tested over centuries and (ii) strong evidence doesn't exist that said substance is actually dangerous (tobacco for instance).
Ytisf/theZoo: A repository of Live malwares for your own joy and pleasure
Python for Scientists and Engineers
I nearly didn't read past the clickbait-y title (don't worry, the writer is a woman too), but it led me to the interesting site fiverr.com "Freelance services for the lean entrepreneur".

Maybe I'm just late to this game but this site fascinated me! In addition to paying people to play games with you, you can also pay someone to record a message of your own choosing in a (not too good) Bernie Sanders voice (https://www.fiverr.com/waynewilco/record-a-voiceover-as-bern...)
> I don't know if quantum computers exist, but I'm sure once they do, the people who build them will keep them secret.

Probably right. UNLESS it's a private company and it's losing bids from government agencies that would otherwise pay for silence. And in this case, you could assume two quantum computer designs exist and the loser is now looking for new markets/customers.
Wouldn't a decent load-balancer/proxy server (e.g.: haproxy) in front of the application servers be a good idea to redirect traffic to a graceful "Ooops" page/server when something like this happens?
There are tons: Data Collective, Array Ventures, Susa Ventures (my fund), Switch Ventures, Amplify Partners, Zetta Venture Partners, AME Cloud Ventures, Ten One Ten, Bloomberg Beta, etc.

That's not an exhaustive list by any means, just some of the first ones that come to mind for me. To be honest, I think the majority of seed funds are interested in AI/ML startups these days. Which one is the best fit for you will depend on the specific flavor of company you're building, your location, your level of traction, et cetera.

If you have any questions, you can email me at: leo at susaventures.com.
Or ROOT for C++ (used by CERN)

https://root.cern.ch/
https://blogs.technet.microsoft.com is down, https://technet.microsoft.com remains up.
1-day Digital Forensics Classes(Des Moines, IA June 7 / Missoula, MT June 8)
I think it was Nolan Bushnell who said that business is the ultimate game. You keep score with money.

Never underestimate people's drive to win, even if winning is meaningless.
Why is it that people love to use the word "disingenuous" so much around here? I almost never see it used correctly.

If someone accused me in person of being "disingenuous" during an honest conversation, I would find it pretty rude.
Brexit: 70 Percent of Tech Workers Considering Leaving UK
That gets me the exact same thing. And afaik what you get from --production is the default behavior when you install a package directly from npm.
How's Wales doing with Wikia? That was his attempt to monetize the Wikipedia concept. It ended up as a huge repository for fancruft. Does it make serious money?
Using tech to uproot systemic racism
Yep. A fairly large chunk of the US would quite love to have, eg, the British NHS. Nobody wants to have the VA.

Moving from the US to another country it's amazing how well-liked government institutions are, even including the local equivalent of the IRS. And with good reason; they're well run too. In the US, the DMV is a punchline and a staple of standup comedy; a shorthand for the towering, malevolent incompetence of government, but most parts of government would work just as well. You could go years without a positive interaction with the government.

It was quite an interesting surprise to learn there are parts of the world where the government functions well and an interaction with them is not to be dreaded.
The thing is, when I wanted to use Windows, I didn't ask for "office online, One drive, bing.com, skype, Cortana, Outlook.com and many services". I wanted Windows, not additional baggage crammed down my throat.
I wanted to write the exact opposite: a Mysql/Postgres client as a FUSE filesystem driver. Namespaces -> folders, tables -> (editable) CSV files, stored procedures and settings accessible as (editable) plain text files.
Nice to see a lot additions to the Rust Book (v2). Like on OOP features for example.
The Telegraph is a broadsheet, yes.

However, I've seen some rumblings on the Internet that it used to be high quality journalism, but lately it had been going more downmarket of late. This is "Internet opinion" of course, so I'm not sure what the real truth is. That being said, if they are engaging in tabloid-style stunts like this these day, this would sort of confirm what I've read.
I'd rather buy Craigslist. At least they make 600M+ profit yoy.....
You likely can't because the marginal cost of providing shipping is 100%, while the marginal cost of providing access to a shitty video library is 0 (or close to it, at AMZN's scale)

Since shipping is the main cost driver here, Amazon is unlikely to offer you such an advantageous a-la carte deal.
Get an anti-adblock killer list, it's great :)

I basically enable every list in uBlock. Suprisingly it almost never blocks too much, when I get blocked it's consequently for being on a VPN.
That's because that's basically all you can do with only $1M these days! The US is nothing but a grievous lie--we have allowed a tiny few to extract all the wealth to the tippy tippy top. I can't even believe people work for like $50K in most places anymore, they should be taking up arms at this point.
I'm in the market for a good React Universal boilerplate and am considering Next.js for my next project...

A couple of things:

1) Why do you not use React Router? How does your own router play with Redux?

2) Is it possible to strip out now.sh? I appreciate it's how you make money but I want to deploy to my own infrastructure.