skysight-inc/HackerNews huggingface dataset:
This is possible, but in my experience this has never come up. Most of the time, a subscriber will indicate that they weren't expecting a charge, and it will be categorized as an unrecognized charge and I'll have to prove (to Stripe) that the customer signed up for this subscription.

But if the subscriber indicates that they think it's fraud, it's always been the case that they think it's fraudulent to have a subscription or some such thing — never that someone took their credit card and signed up for my service.

The worst incident was where a subscriber accurately described what happened — that he didn't remember it would be a renewing charge — and his credit card company insisted on categorizing it as fraud, even though he explicitly said not to. When a charge is categorized as fraud, Stripe makes you prove all sorts of things that are totally irrelevant where fraud/identity theft have not happened. I think they even asked me to provide a photocopy of the subscriber's driver's license.

So it's a real bummer when people flag transactions instead of taking a second to cancel their subscription.
And how would a rogue CA cert get into your cert store?

The only issue with random access points when using properly secured connections is the metadata leak - DNS queries, etc. They will now whom you are connecting to, basically. That's it.
Not all databases systems require a connection pool, though it is often a good idea.
Was this the motivation for keeping blocks small then? Also, don't you need duplex links to run a node?
Kenya's personal data conundrum
So your claim has gone from "it uploads the password to the server" to "you trust unverified Javascript".

No, I don't have any particular reason to trust it.

I was just pointing out that the claim you made was inaccurate.
I think the situation is somewhat different. Kodak was a regular market leader making regular profit margins. I'm not sure how much of it is true, but I recall reading that they invented the digital camera and then shelved it because it would compete with their own business. That implies that they could've produced it, perhaps at the cost of their analogue business, but at least with the potential of becoming market leader in this new market and reaching similar margins.

For Elsevier, that's simply unlikely to be possible. Even if they manage to successfully transform into an analytics business, the margins they'd be able to achieve would be far lower, because prices would no longer be artificially inflated.

But yes, there are external forces now pressurising them, and I think that's why they're transforming into an analytics company - to survive afterwards. But they're holding on to the old model as long as possible, because they're going to take a loss.
South Africa Becomes the Next Country to Crack Down on Crypto
The APACS 70 standard allows for a maximum card length of 19 digits, so tacking more digits on the end isn't going to work with current message formats. IIRC ISO 8583 also has the same limits, although that message format is somewhat more flexible than APACS 70 so could probably be tweaked.

It would of course require a massive amount of work across the board, so it's very unlikely to happen.
Tiny houses look marvellous but have a dark side
Honestly, for what they are offering it’s still pretty cheap, if you include Gmail, G-Suite and Meet. I’d love them to have a proper chat app though.

There is a lot of young startups offering just a single product for a higher monthly price.
Still, I was thinking that Google cares more about the adoption of its cloud office package and probably doesn’t get a lot of its revenue from it.
Ha! So we may not be able to scan for "life forms" ala Star Trek, but apparently we have a somewhat universal scan for semiconductors. That's amazing!
> VPNs can be purchased with BTC.

That doesn't matter since you're still connected to them with your IP address, plus there's the additional problem of browser fingerprinting which alone may leak enough information to de-anonymize you and let us not even mention the lack of first-party isolation.
That is a great point, thanks for making it. You are absolutely right, I was overgeneralising with that lesson!
Building a multi-tenant application with Prisma
Hello World: How the way people code “Hello World”
> Pay for your VPN with privacy coins or run your own VPN.

That doesn't matter since you're still connected to them with your IP address, plus there's the additional problem of browser fingerprinting which alone may leak enough information to de-anonymize you and let us not even mention the lack of first-party isolation. Running your own VPN is even worse since it basically links you to all of the traffic.
Seconded. In these type of high visibility projects and prestigious consulting companies usually charge in hundreds of thousands and in millions for a single deliverable (narrative document, logo, brand). The whole process might months to a year with several people involved from the agency.
You are inverting the reasoning. GitHub bought us because our main audience is developers. We should have stuck with markdown, because our main audience is developers, not because GitHub also saw that and acquired the company.
I do not think author contradicts himself at all.

If they would have used react-native-web, he would have saved some time writing the Android (or IOS) apps. Because he could have reused the code (he said that too).

This is what I have done, anyway.
Also react-native-web is very very high quality library.
I am just amazed at the quality Nicolas Gallagher is putting out.

My app now runs on web and via browser on android/ios with all the magic of responsive UIs, reshaping all those positions when a user rotates the screen or zooms out.

I am wondering, on occasion why I spent time on native apps (even with React Native) -- at all, as React Native Web (with a bit of React-bootstrap) -- are just amazing.

Wrt next.js, at least when I looked at it mid last year, did not support routing with React-router. And for me it was a big deal, I did not want spend time on learning specifics next-js routing.

Instead I went with
https://github.com/jaredpalmer/razzle
which supports React Router for routing, which I use Android/react-native and React-native-web, uniformly.

React-router, is also very good and useful library with nice, intuitive architecture for routing.

At the end, I decided for my need the Server Side rendering is a later-stage item. So I have not spend more time on it.

I suspect Spectrum did not loose much traffic because their app is not using SSA routes.

Zulip chat app (may be they are spectrum's competitor, not sure) - uses React Native for mobile (https://github.com/zulip/zulip-mobile ), but something else for web. As a reference.
Ask HN: What are some innovative applications for Quantum Dots?
The only programming language we all know is JavaScript, so it was not an option to go with another backend language.

I would love to learn Elixir though, from what I have heard it is great for real-time!
You’d expect a million dollar design company would put a little extra effort to avoid it.
Outplacement Services Market Growing Tremendously with Top Market Players
Portable dumper landed in master
One quick and cost-effective way to detect IR light is by using the front-facing camera on your phone.

Unlike the rear-facing camera, the front-facing camera does not have an IR filter and can easily pick up IR lights in the dark.

To try this at home, grab your TV remote, which uses IR light to send information to your TV and open the front-facing camera on your phone. Next, point the front end of the remote at the camera and press any of the remote buttons. The IR light that is normally not visible will be completely visible on your camera screen.

Well I’ll be darned. This works! (iPhone 7)
Well it claims to take the first 5 characters of the SHA of the plaintext.

But it also pulls untrusted code/CSS from various sites over HTTP. It's far from unclear who controls that code.

For instance this wall of code:
http://az416426.vo.msecnd.net/scripts/a/ai.0.js

A more sane approach would be to just put your passwords in a file, maybe by export from your database manager. Take a sha1 of each password, then submit those. That way you aren't trusting any random 3rd party sites to run safe code.
What is the best way to help the project?

I’ve got an old Sprint Samsung Epic 4G slider (WiMAX, the old 4G), that would love to be a little mobile terminal...might be a little too dated though...

Anyway, this is a fantastic project and I’m eager to contribute!
You'll hear the same with John F. Kennedy. Some people refer to him as Jack Kennedy. Here's why the names are interchangeable:

https://dmnes.wordpress.com/2017/01/28/why-is-jack-a-nicknam...

"[Jack], the commonest pet-name for John, has caused a good deal of difficulty owing to the natural assumption that it must be derived from the French Jacques and should therefore logically represent James rather than John. The problem was cleared up by E. W. B. Nicholson in a little book entitled The Pedigree of Jack and of Various Allied Names (1892). He showed that there is no recorded instance of Jack, Jak, Jacke, or Jakke ever being used to represent Jacques or James, and that no statement in favor of the French connexion has been produced from any early writer. He then proceeded to elucidate and illustrate with examples the development of Johannes [the standard Latin nominative form] to Jehan [the standard Old and Middle French oblique form] and Jan [the standard Middle Dutch form], whence, by addition of the common suffix -kin [a uniquely English suffix], we get Jankin, which as a result of French nasalization becomes Jackin [this is the same nasalization that gets us Harry from Henry], and was finally shortened to Jack. There was a similar development from Jon to Jock (the Scottish form of the name)."
There is no "just" here. He is representing a monstrous client and that is something he can and should be held responsible for.
How about if you go to another device which you have not used before (maybe a library or internet cafe), do not identify yourself to the web in any way, open a sole link to that page and enter the passwords you wish to check. They are checked, but there is nothing to link them to you?

Of course, if we don't completely trust Troy Hunt and everybody associated with the site then we could assume that now those passwords have been added to a secret list of known unknowns, to use when trying to crack the hashed files they already have stored.

Security sure is difficult! I know it says at the top of the article that it is pitched at non-technical people but most of the people I know would have glazed over in the first few paragraphs..
World's Largest 3D-Printed Concrete Pedestrian Bridge Completed in China
there is no DateTimeOffset type in PostgreSQL, do you mean timestamptz? Can you send a link to a support patch you sent?
I'm not criticizing the power of TeX in terms of typesetting, I'm only referring to the _language_ here. (And you are aboslutely right, Org and other markup languages are not competing with TeX.)

Imaging the capabilities of TeX with a good programming language.

I don't find WEB beautiful. In my opinion, literate programming (at least in this case) is a pretext to hide a terrible, unexpressive programming language.

As you're saying, Emacs had the good taste to use a Lisp back in those days, so it really is a pity that TeX didn't.
Ask HN: How do I give push access to everyone on GitHub?
I want everyone on Github to get write access to my repository. How do I do that?
It would not reduce the cost of running a full node in any way. It's just untrusted data from a satellite instead of from the standard Bitcoin p2p network.
Layman wondering here: would legal inside trading not encourage the few with the inside knowledge to themselves exhaust the benefit that is to be had from the information, at the expense of everyone else? Including shareholders?
This line made me snicker:

"And Facebook has planned to build 1,500 apartments near its Menlo Park headquarters, with 15 percent to be affordable."

So, 85% of the housing created is too expensive to be purchased? Sounds like a pretty poor business model. ;)
Is this really true? Both Buffett and Gates' money didn't come from salaries or fees. For Gates, it was his ownership of Microsoft. For Buffett, it was his stewardship of Berkshire Hathaway. However, Buffett's Berkshire Hathaway never sought to gain an edge over shareholders. Buffett didn't compensate himself with lavish options or salary.

Bogle could certainly have been a multi-billionaire. He could have founded Vanguard as a for-profit company and charged high fees. However, that wouldn't be like Buffett. Berkshire Hathaway doesn't operate on a percentage of the company's value going to Buffett every year.

In fact, Bogle took a similar path to Buffett: an investor-friendly path that meant little salary or fees going to them, but a great value for investors. It seems like the difference between them would be attributed to difference in starting point and differences in returns. Since 1964 (when Buffett took over Berkshire Hathaway) through 2017, Berkshire had an overall gain of 2,404,748%. By contrast, the S&P 500 only hit 15,508%. If Buffett and Bogle both started out with $1,000,000, Buffett would have ended up with $24B while Bogle ended up with $155M.

I don't think Bogle could have been a multibillionaire like Buffett unless he either 1) charged a lot of fees for Vanguard; or 2) actively managed his money to do significantly better than the S&P 500.

Don't get me wrong: Bogle has done amazing things for society by pioneering low-cost index funds and offering investors the investor-owned Vanguard. I just think it's fair to point out that Buffett's billions don't come off the back of fees or salary. The thing that made Buffett richer was the fact that Berkshire Hathaway has hugely outperformed the S&P 500. If Berkshire had gotten the returns of Bogle's S&P 500 index fund, Buffett would be rich (as Bogle was), but not a multibillionaire.
There are a million sites out there with credit card forms with 16 digit validation for Visa and Mastercard, so it wouldn't be entirely painless to introduce extra digits.
Apple Cutting Back on Hiring Due to iPhone Sales Slowdown
The state is not the public.
If its a legit subscription which is easy to cancel online, then I agree, its not nice to issue a chargeback for that.

However, if a company abuses darkpatterns to keep you from canceling (by making you wait half an hour in a _call_ for a service you trialed with a few clicks..), I have no issue with chargebacks.
Glad to see that you and GP both run your business like I run mine — I follow the same procedures you describe here.

To answer your question, I have also lost Stripe challenges even though I've provided server logs and such. But sometimes I win. It seems almost random. Usually when I win it's a long long time later, and there was no apparent reason. Sometimes it helps to forward an email from the customer stating that they didn't actually mean to flag the transaction, but that they just wanted to cancel.
The exceptions have nothing to do with tonnage and everything to do with maneuverability, either due to the nature of work or the need to stay in a channel to prevent running aground.

Of course you can’t expect a tanker to break/turn on a dime, but there’s nothing in the rules about tonnage.
It is emphatically the right thing to do, but if you're an unknowing user it is surely also very inconvenient to be booted off.
250,000 deaths a year from climate change is a 'conservative estimate,' research
The Go compiler produces the same binary regardless of which host OS it is ran on. i.e., the OS you compile a Go program on doesn't matter (assuming pure Go code, not including C etc).
It’s not really the customer facing web apps that would be a problem here. But I can tell you, anybody who’s tried to do validation on credit card numbers has experience with failing at doing validation on credit card numbers.
This will create affordable housing for the same reason Bill Gates philanthropic initiatives create a cheap labor force for Microsoft.
It's the same as we used to have panel vans based on the sedan/ute wheelbase but they quietly disappeared and it's now 1t trays with a canopy or high roof vans like a Hiace.

Maybe the hot ute will make a comeback someday...

https://www.whichcar.com.au/news/honda-civic-type-r-ute-conc...
So this seems useless for payment, but here is the real hidden interest:

You can send a file up to 10Kb, and pay for byte sent.

It's cheap, coast looks to be $0.0035 for a 5Kb file.

The receiver can get the file, encrypted, without internet, using only a SDR tv card, amplifier and antenna, worldwide, in 10 minutes.

I see there large possible applications!!!

https://blockstream.com/satellite-queue/

https://github.com/Blockstream/satellite#hardware-requiremen...

https://blockstream.com/satellite-api-documentation/
"Fittingly"?

Note that blue California has far more acute acquifer depletion and (thanks to one-party control) has no oil extraction tax... contributing to severe groundwater poisoning in places like Kern county.

Coastal CA already suffers saltwater intrusion into groundwater... which, of course, is blamed on global warming instead of acquifer depletion.
So you think using Tor is worse than not using Tor and connecting to everything plaintext?
So mobile redirects just happen because of magick?
You Can Now Blur Background on Skype Desktop App for Windows and Mac
While I do like some programming languages more than others, I really like this attitude. After all, it's just a tool.

Personally, I am that kind of person that likes to experiment with a lot of languages to have a bigger toolset. So when I visit some subreddit related to a new language and I look for topics that would help me decide if that language is good for what I am looking for, I always find topics with people adoring the language and there is rarely any downsides mentioned. That kind of praise is just counterproductive and I don't understand why other people don't see it that way.
Heh, I mentioned you above :)

https://news.ycombinator.com/item?id=18921700
imo it's better to find your job first, and then plan your housing around your commute. You might get a job based on the Peninsula or the south bay. In that case you might want to live closer to work.

Most people just use craigslist. Beware listings that seem too good to be true (will allow pets, cheaper than market rate, have parking) and don't send anyone money without seeing a place in person first. Anywhere that will take your $$ without you doing a walkthrough of the actual unit and meeting the landlord or property manager in person is probably a scam.

I recommend getting an airbnb for a week or two and finding a place in person. Places that will rent to you from afar are generally either undesirable or scams.

Generally small guy landlords who only own one building or a couple units are better to rent from than giant megacorps who don't care about you and raise your rent all the time.

Be prepared to apply on the spot if you like a place, bring all your materials, credit report, application fee, application paperwork, proof of income and everything to the showing. If you like the place, apply immediately!

Best of luck!
That assumes I can be aware of which sites do what, to make an informed decision. That would be a great first step but that’s not how it works.
We call it “the tonnage rule”

https://www.google.com/amp/s/www.urbandictionary.com/define....
> I never dispute chargebacks, but instead try to get the customer to withdraw it and behave like an adult, letting me refund and cancel his subscription like we would have had he simply asked.

I've tried to do this too, but unfortunately you're in the position of asking a former customer a favor, and you can't give them anything in return. They end up in the same position (getting refunded), but have to waste time on the phone with their bank. It's a tough sell, in my experience.
I don't remember seeing a rear-facing camera for which it wouldn't work. Are there extra IR filters installed on newest models, or is that an Apple thing?
There are several closed licenses which allow you to do that.
Mongodb now uses one of those closed licenses.

The wording is so vague that this license is incredibly toxic, no one in their right mind would consider using it.

Seriously, is that all you IP lawyers can come up with ?
Just build dorm style apartments for most of your employees and be done with it. Studio apts.
gitKraken is nice too

https://www.gitkraken.com/
Well it does, if you have javascript off, from the source (page says "If you submit a password in the form below, it will not be anonymised first")

Troy seems to have a fine reputation, but I don't want to trust the crown jewels (my passwords to everything) on Troy's reputation, the security of his site, cloudflare, and random javascript bits hosted in various places.

So sure the design and explanation of the page is that passwords are not uploaded. But since I can't practically verify that myself, I wouldn't upload passwords there. What's worse is even if I could audit every line of code, I couldn't guarantee other people wouldn't get a malicious version of the site.

So generally saying "Sure, type your password into a form on this webpage, I found an explanation that says it's not uploading it." is a very bad idea.

There's similarly plausible pages for things like generating SSL certs (not just CSRs), ssh keys, generating passwords for you, and similar that often have reassuring explanations that their security is just fine.

So generally never put your private key or plaintext password where a random 3rd party might read it. The promise that some anonymization process will be applied should not be enough to get you to risk it.

This reminds me of:
http://bash.org/?244321
Possibly. Although this would mark a clear demarcation line between these services that offer a genuine trial period and those who just count on your forgetting to cancel or deliberately try to make cancelling difficult or time-consuming.
So essentially you can fuck with the lifehood of a driver with one lousy * feedback; nice!

Frankly, and probably to the detriment of a few ultra libertarians in here; I prefer a government regulator with established processes, a mandate and enforcement for drivers to observe rest times and drive sober and a requirement by law to be properly insured and health - (let alone background-) checked if you drive people around on a commercial basis to a completely arbitrary review system, which is a joke to begin with.

I can't judge Uber, since I never used and never will use it. But just about any other review system is rather unreliable. That 4 1/2* restaurant on trip advisor, which is mediocre at best? All those 5* AirBnb reviews for places where you have to tip-toe around strangers and find a constantly occupied bathroom? This would get a 3 * rating - if you feel generous - if that would be a hotel room.

edit : spellos and slight clarification
I'm suggesting for evolution to control the production of plants and animals, as usual
For those wondering about how much the lightning network is actually used, have a look at the stats [0]. Adoption is growing steadily.

[0]: https://1ml.com/statistics
Even though Microsoft is funding this project, the government is definitely still involved. The credit will (& should) obviously go to Microsoft since they're shelling out $500M, but there's definitely a lot of hard working honest peeps from the Govt. that will be helping as well.
I think there's an echo?

https://news.ycombinator.com/item?id=18690666
This is an epic talk on the psychology of clutter by a very subtly brilliant therapist. [0] I re-listen every few months and get new things out of it every time. Many of her points are in this article, but also many more and more deeply and personally contextualized.

[0] https://www.youtube.com/watch?v=lu3eODhBTO4