skysight-inc/HackerNews huggingface dataset:
Lawyer Zarah Garde-Wilson launches court action to unmask Google reviewer
Not my experience.

Working with Stripe hasn't been error free. I've had one or two nasty bugs. But the product is fluid, works, and most importantly, they have great customer support. I wouldn't mind paying a little extra for it.

I'm a relatively small fish, but they replied within hours and fixed the issue. On a Saturday. As long this "Saturday test" remains true, I'm a happy user.
raphlinus had this to say in response to a similar question: https://news.ycombinator.com/item?id=22370494
Does Patreon prohibit its creators from offering subscriptions elsewhere? If I was a creator, I'd create my own subscription service on my own site and offer the same subscription packages at lower prices. Patrons benefit by getting the same content at a lower price, and I benefit by cutting out the middleman.
Francesca is excellent, thank you for sharing.
That's always an option in this case too. Just move to a somewhere without an extradition treaty.
One heck of a coincidence.
I have heard good words about The Expanse. I haven't read the books but have seen the show and I think it's fantastic.
> I imagine the card companies have an explicit rule that, in order to accept their cards, a merchant can't charge their users any extra fee?

In the US, this was the subject of a recent class-action suit! https://www.paymentcardsettlement.com/en
He was an employee at NASA several years ago.
> From a business owner's perspective, PayPal is the kind of company that would shut down your account and steal the balance for 6 months if their shitty algorithm detects anything "suspicious." Your attempts to contact them can be ignored or given generic responses that tell you nothing.

Heh, PayPal just this month asked me to provide charity information for my personal account, and subsequently limited my receiving/sending privileges.

Phone calls to them trying to sort this out have always ended up at some call centre in the Philippines, where the agents can only tell their users that the account limitation is "for their safety".

They've also limited the personal account of a friend of mine (who's interestingly enough ex-PayPal) before, also asking for charity information.
Benedict rule.
cash and bitcoins are underrated
You employer isn't your friend, but there are aligned incentives when it comes to the business continuity and your continued employment as affected by general business health (even if not necessarily aligned when it comes to your benefits and salary).

Law enforcement doesn't even have that aligned incentive. You might say you are aligned in that you want the law to be followed, but their incentive is more along the lines of making sure they bring in and prosecute cases. If the only way to make the case work is to throw the company that reported it (and by extension, its employees) into the grinder because that's all they think they can successfully do, then that's likely what they'll do.
> I have to seriously laugh at the idea of comparing Oscar Wilde, a gay dandy in Victorian England to the few racists that patreon has thrown off its platform.

The point is that one was vilified just like the "few 'racists' that patreon has thrown off its platform". Funnily enough Oscar Wilde himself was probably racist too.

> Either way I'm not really sure where the death talk is coming from because patreon seems to be doing fine.

It's in the tweets. "Anyway, the first sets of VCs have likely been paid off for their efforts (hence the ever-growing rounds) and the new move into "Business Loans, but for Morons" that Patreon is trying is all an attempt to pay back a line of credit they never will."

But I agree that patreon should be fine as long as they don't face a viable competitor.
Why is PoE so popular then?
> It’s not reasonable because the cost which the fee is covering is not the cost to process the transaction.

Who says it has to be? Businesses have all kinds of costs not directly related to the day to day transactions with customers.
In the future, it'd be helpful to email questions like this to hn@ycombinator.com. The site guidelines ask you not to post about this in threads, and also it's basically random whether we end up seeing it. An email is nearly certain to get seen, and if we see it, we'll look into the issue and get back to you.

https://news.ycombinator.com/newsguidelines.html
> GitHub is a proprietary service that's generally terrible for developers.

In what way? I find it incredibly awesome.
Haha, that is completely ridiculous!!

Such loss!
The title seems to be misleading. According to the article, Google isn't removing data protection from UK users, it's moving their data to the US (which in theory would be compliant with EU data protection laws even for EU citizens, though there are some arguments stuck in the courts that it shouldn't be) whilst following the same rules. This is most likely the result of some rather messy political disputes between the EU and the UK over data hosting and the GDPR that don't look like they're going to be solved any time soon.
It wasn't pid exhaustion...it was tying up too many resources on the server for it to serve the workstation requests. These were HP 9000 Series 300 workstations configured to share the disk on a "cluster server". You could also log into the server and run jobs, and that's what this guy had done. So while the admin still had control through an existing logon window, the rest of us were stopped because the system was wedged with the fork bomb.
Honestly, I don't find their support helpful with fixing any of my issues, and asking the same question multiple times gives completely different responses. I managed to completely break the Stripe Test API (nothing works, always "in the process of deleting"), and I've been in support limbo for at least a week now.

Haven't looked into the alternatives, but I hope I can move most commerce over to Bitcoin since I can run that fairly cheap internally to the company (and bypass PCI compliance, etc)

EDIT: Maybe I was being overly critical in the first half, but in general implementation has been a bumpy experience. Most transactions on this platform are microtransactions, so it isn't that Stripe is expensive as much as I'm using it in an unconventional way, and not having a $0.30 static fee drastically changes my profit margins
Indeed. So, as per the article, they take $100M investment to keep this weird chain going.
(I'm one of Stripe's cofounders.)

Thanks for the candid feedback. A few quick thoughts --

- This is not a new policy change -- it's been our pricing for all new users since 2017. (The news is that we're now applying this pricing to Stripe's older users, in part as a response to some price increases that the card networks are making.)

- Our policy on refunds is pretty much the same as Braintree's.

- We've added a lot of new functionality to Stripe since we launched in 2011. (The Stripe that launched back then did not support any non-card payment methods, non-USD currencies, non-US users, etc.) The vast majority of new features come with no new fees -- the Stripe package just gets better. For improvements that don't represent discrete new features, the changes can be non-obvious. Our goal is to quietly optimize things so that Stripe integrations continually get better without your code having to change. For example, Radar is far more effective at preventing fraud and chargebacks than it's ever been. Or, last year, we built an ML engine to automatically optimize the bitfields of card network requests. This has already generated an incremental $1 billion of revenue for Stripe users (with no additional cost).

- Testing production flows with fake numbers is tricky. (How should these charges show up for reporting purposes? If we exclude them, that introduces another discrepancy. If we include them, that means you have to then handle the downstream cash discrepancy.) It's not an intrinsically unsolvable problem but we have not yet seen a clean solution that we feel good about. As other commenters point out, making sure they're sufficiently secure is also a challenge.

- While we're proud of our books, I can assure you that the ratio of people working on improving our payments stack to publishing is about 1000:1.

All that said, it's helpful to hear how it seems from your standpoint. We're acutely aware of how much Stripe has yet to do/build. We'll continue to work hard, and I hope we can support your business for many years to come.
In the U.S., fees on debit cards are limited based on the Durbin Amendment.

There is a different fee between PIN and signature debit, but not so much that signature debit matches credit cards.

https://www.valuepenguin.com/credit-card-processing/intercha...
This is great! Thank you. Do you have any other plug-in recommendations that you have found useful?
I was surprised at the poor state of watchdogs in PC-class Linux systems. I needed one recently and was bummed at the state of the old watchdog daemon / softdog kernel module. It works, but it is not nearly as easy to get going (on Ubuntu) as I expected. systemd also has its own watchdog and I can't figure it out.

Anyway turns out I really needed a full PC hardware watchdog. I ended up buying some $8 anonymous piece of Chinese hardware that's USB powered. It hits the motherboard reset switch if the motherboard hard drive activity light hasn't flashed in awhile. Dumb thing, but it seems to work.
> I've read about this a few times now, but have been unable to find a good resource on how to set such a VM up.

You first set up a VM and set up your favourite authoritative DNS software on it: popular choices are ISC's BIND and NLnet's NSD. Either will do. Call it (e.g.) ns-dnsauth.mydomain.com, which is Internet accessible only on udp/53 and tcp/53.

You have to then configure that DNS server to serve the domain (e.g.) dnsauth.mydomain.com.

Next you configure the DNS server software to allow dynamic updates. For ISC BIND, you can set up (crypto) keys and use the nsupdate(1) utility:

* https://www.zytrax.com/books/dns/ch7/xfer.html#allow-update

* https://dan.langille.org/2017/05/31/creating-a-txt-only-nsup...

Point your public/external DNS records to your delegated-auth server by having (say) _acme-challenge.www.mydomain.com be a CNAME to (say) _acme-challenge.www.dnsauth.... LE will follow the CNAME and try to do the verification against the record in dnsauth sub-domain that lives on the ns-dnsauth VM.

Then you have your LE/ACME client(s) run a hook script to publish (and cleanup) the dns-01 TXT challenge records:

* https://dan.langille.org/2017/07/04/acme-sh-getting-free-ssl...

* https://github.com/dehydrated-io/dehydrated/wiki/example-dns...

The LE client goes to the LE API, gets a verification token/nonce, executes the the hook script to push the TXT record to ns-dnsauth, the LE folks verify the record, the LE client (ideally) cleans up the TXT record, receives the cert for the LE API, puts it in the correct path and restarts your (web) service(s).

Someone actually wrote a limited-functionality DNS server that allows for pushing of records via a REST API for this purpose:

* https://github.com/joohoi/acme-dns

This way the 'heavier' BIND/NSD software doesn't have to be used, as those have more features than are needed.
Hrm, not good. Could you add me to that email chain and I can help? (edwin@stripe.com)
They probably pop up a lot because they're the result of people being actively misinformed. The UK press has been pushing this narrative about the UK being a tiny, irrelevant backwater of the EU hard ever since the referendum was announced. It's certainly not the only way they've lead people astray either.
Was it an 8 hour a day 5 days a week program for two years?
That makes some sense. Thanks.
My apologies. I would go back and remove or edit them if I still could. I went overboard.
GameStop employees report extreme pressure from ‘desperate’ bosses
UK law won't diverge from EU law if the consequence is loss of access to or friction with the European common market. The difference between the UK and the US in your comparison is that the US turned into the world's largest economy and sole superpower. The UK's economy is smaller than that of California.

Realistically you can only write your own laws if you're the top dog.
Ironic.. to destroy the always listening app we propose a different always listening app to jam.
Downloaded it, but it asked for permission to use MacOS' accessibility features, which I thought was weird.

But they mention iOS and mac apps on the site coming soon and have an email signup form.
Not all of them.

https://support.google.com/domains/answer/6010092#registry

I just checked my Google Domains account, and my .dev domain renews for "$180 plus tax".

The pricing is entirely opaque and you can't find it listed anywhere, but I did find a comment from HN last year that listed several examples:

https://news.ycombinator.com/item?id=19201073

Some names cost even more than the $200 I initially cited!
Why not use a small charge against a real card? A few $1 charges work fine and are cheap enough to ignore.
I've always had pretty good luck on their freenode channel
But if you do that you're giving up all public images. It makes sense in a large organization but there are plenty of other use cases for Docker.
> Our policy on refunds is pretty much the same as Braintree's.

I'm seeing something different on (my local) Braintree site [1][2]:

> All processing fees, except the per transaction fee, are returned for full refunds. For partial refunds, all processing fees are returned at a prorated amount, but the transaction fee is not returned.

[1] https://www.braintreepayments.com/sg/braintree-pricing

[2] Looks like the US one has the same policy as Stripe: https://www.braintreepayments.com/braintree-pricing?locale=u...
Just as an example, any business that deals with sex - porn sites, strip clubs, etc. have higher returns.

Why should your mom and pop diner with low fees pay more? When you are in certain types of business, you can take that as a cost of doing business.

But no matter what the reason is, if Stripe doesn’t get the money back why should they eat the cost? We should want companies that we use to pass the cost of doing business + profit to make enough to be sustainable.
Just clarifying. If I refund a $2,000 charge it costs me the seller approx. $58?
If I may make a sincere criticism, as a person who knows nothing about either side of this conversation....

We should all delete "I'm sorry you feel that way" from our mental phrasebooks. It is a phrase that always falls flat, comes across as potentially sarcastic, and is the textbook definition of a non-apology apology.

If you want to clarify something, go for it. If you don't want to apologize, don't feel obligated to do so. But please, for your own benefit, steer clear of this no-good phrase.
I integrated with Adyen and found Stripe far easier to use. The international aspect forced me to use Adyen though. What was your experience like with them?
Scala is also definitely worth checking out
https://www.scala-lang.org/
Epidemiological Characteristics of Coronavirus (Covid-19) in China 2020
Shouldn't that be centi-cents? ^^
Y'know, you can have all the valid points in the world and still come on a _bit_ too strong.

I get the point the author is making re: LARPing, but this kind of attitude and tone is bordering (or, bluntly: is) condescending to anyone who doesn't know as much as you. It's a huge shame because the general discussions surrounding privacy/security are absolutely rampant with paranoid bullshit, and stuff like this just doesn't help. The people you consider to be LARPing might honestly just be new to the idea of security/privacy/encryption/(insert your label here) and would be better served by a tone where you're not talking down to them, especially if you're an established authority.

Personally speaking, I use encrypted email for my personal account - but I'm under no big illusions about it, and at this point it's partly out of laziness as I find moving email providers to be a useless exercise in wasting time. My original use case was my wife and I wanting to send documents back and forth easily, have it encrypted and retained somewhere that's (relatively) easily searchable, and isn't one of the bigger email services. Email is a workflow that goes back decades, and I'm not particularly interested in changing that mental mapping in my brain (a feeling I suspect many would echo).

It's email. It's not encrypted or 100% private if I email my buddy who's using Gmail/etc. It does jack all for my bills, newsletters, and so on. I'm not worried about the metadata not being encrypted because if I needed that level of security, I'd use Signal or some other tool.

You're probably right that it can't be "fixed", but there's also nothing wrong with attempting marginal improvements until an eventual replacement comes along. It remains a convenient "it just fucking works" and until something replaces that, and interoperates with the rest of the way the world actually works, it's probably not changing.

My 2c, at least.
Merchants also bear all the costs for fraudulent purchases. Even if they followed as much procedure as the CC company provides.
The water seems to wick through the stacked nanotubes, somehow the nano structure develops a charge, bio energetic effect from a skeleton kinda?
You're right! (Though I am.) I edited the comment.
> (n=2 vs n=6) * There was a SINGLE asian male in the data set

From my understanding of statistics and biology this is not significant at all then.
That looks like a capacitor with a built-in spark gap. I've seen them in CRT circuitry. They're probably using it in the network card so if there's a huge over-voltage (e.g. lightning somewhere), it will jump across the spark gap, limiting damage.
> And which of those also have an API that is supported by Certbot?

Certbot allows for hook scripts, and you can use a utility that can talk multiple APIs:

* https://github.com/AnalogJ/lexicon

> I would really like names where a setup like this has been tested and works.

The guy who runs BSDCan and PgCon uses it for his personal stuff as well as FreshPorts.org, etc:

* https://dan.langille.org/2017/05/31/creating-a-txt-only-nsup...

* https://dan.langille.org/2019/02/01/acme-domain-alias-mode/

He used acme.sh, though I'm more partial to dehydrated:

* https://github.com/dehydrated-io/dehydrated/wiki/example-dns...

We use it at work, but I don't want to dox myself. :)
At some point though, aren't you essentially reinventing a traditional db over top of sqlite?

The reason to use depencies is so you don't have to reinvent complicated wheels
You know its strange - We work with an incredible number of decimal facts (financial data), but we find that this has zero impact on our SQLite usage because we have policy where extremely complex business entities that are prone to rapid change are serialized to JSON and stored as BLOB columns. Within this JSON serialized data is where virtually all of our decimal values reside. Obviously, its not a solution for any arbitrary case, but you can usually find workarounds in interesting places further up the stack. We use only 3 data types in SQLite - BINARY, TEXT and INTEGER.
I didn't know the title was difficult to decipher, but the reason for it sounding unnatural is that title lengths are limited on HN. But thanks for all the suggestions.
To be fair, this is the CEO personally reaching out. I think that's beyond awesome.
That makes sense on a surface level, but wouldn't a better proxy for CoL be zip code + gross living area? GLA essentially encompasses your "more stuff -> more expensive" model, and zip code should provide an approximation of what the baseline cost of housing is in the area.
The Buffalo Theory
Venture capitalists are vampires. I'd only ever work at a company beholden to them with the assumption that it'll be a short-term affair of learning, saving, and "good snacks". There's no way in hell I'd let them anywhere near one of my own ideas that I had any faith in at all.
the mac link doesn't work (anymore?)
I don't think you understood my point in the first post. The point is that we don't know if Stripe still has to pay interchange fees in case of refunds. It is assumed they don't, and they're just pocketing it.
Sure, but "stop using encrypted email" implies everyone would have to use plaintext instead of Signal.
I have an account that is from 2013, and they are ending March 1 for us.
Forgive me, I was confusing strongly typed with statically typed. My point still stands though, for someone used to a dynamically typed language like Python having database columns that aren't locked to a single rigid type will seem quite natural.
Speculative Fiction, not science fiction.

Fantasy is more than welcome there.
I see you too forgot a comma once in a Java program.
SwiftUI stacks and spacers [video]
What on earth does a "federated protocol" have to do whether an app runs in Electron?
I mean if theyre bungling an outbreak on a ship imagine what would happen if patient zero was in japan.
This apparently has roots in some ancient practices (Tcl is not exactly young). In 21th century, we likely don't need to save a few bytes and reuse a variable, and can afford to preserve our sanity instead. Well, we can even afford a built-in ACID-compliant SQL database!..
Trans fats are the real killer and bans are already in effect around the world. The FDA banned trans fats in the U.S. as of June 2019: https://www.fda.gov/food/food-additives-petitions/final-dete...

That seemed to happen rather quickly, at least once the evidence became overwhelming. The FDA was only a few years behind major cities like San Francisco, though some European countries were way ahead of the curve.

Red meat and dairy have significant amounts of trans fats. You're still probably better off with vegetable fats if you can help it, at least where partially hydrogenated oils are banned.
We are condescending† somewhat deliberately. It's time to start shaking proponents of encrypted mail by the shoulders. We need analyses that spell out the concerns starkly and don't equivocate, because the issues themselves are stark, and a nuanced discussion (if one exists) cannot be effectively communicated to ordinary nonspecialist users.

In a world where encrypted email was popular and no reasonable alternatives existed, the equation would be different. But modern secure messengers have lapped PGP and S/MIME a practically uncountable number of times. I don't know what large power of ten the multiple is of messages protected by Signal Protocol compared to PGP, but I do know that it's large. The risk is not that people will naturally gravitate towards encrypted email (which is in practice a nightmare to use), but that well-meaning but poorly-informed technologists will try to talk them into doing that and adding encrypted email to the basket of tools ordinary people use. That can't be allowed to happen.

I also want the analysis to be somewhat bracing for technologists. I'm not making fun of PGP users when I say they're LARPing. I'm describing reality directly and meaningfully. I don't think proponents of encrypted email have really thought through why they're using PGP and S/MIME, and why they're not terrified of metadata collection and the occasional plaintext reply. Their risk profile is not the risk profile of the public at large; when you're LARPing, it doesn't matter if you get hit on the head with the sword.

† Not the term I would choose, but let's stipulate.
It should be 1. "GAINBRAK,1" is assigning 1 to GAINBRAK.
It’s interesting how much the press of the US and U.K. push the narrative that the UK, respectively, are terrible.
Forkbombing was one of the first things that piqued my interest in CS! It can be written so tersely yet effectively:
:(){ :|:& };:
That feature isn't trying to prevent people from deliberately archiving or forwarding messages in a way that the sender didn't intend, expect, or prefer.