skysight-inc/HackerNews huggingface dataset:
One of the main tough things with the SCA / Payment Intents is that we have to keep our payment state in sync with Stripe's (updating the amount to charge and syncing with the cart total), and then syncing with a webhook. The transaction apparently happens in a separate process from the customer's browser session.

With PayPal you simply send a request for a certain amount, and when it gets approved the customer's client comes back with a token and you choose to execute it or not. If you don't execute, the charge just isn't completed.

Stripe's docs says to not depend on the client because the client can close the browser window. In the PayPal case, if that happens, the transaction is simply canceled (since the client closed before finishing).

EDIT: It looks like Stripe's docs do support the PayPal style integration, but recommends against it because it doesn't work with longer-delay asynchronous methods. It's funny because PayPal's old API was done in this way (with instant payment notification webhooks) and their new API is closer to Stripe's old API.
This is how my notes have been stored for years. I have:

- A single markdown (soon ASCIIdoc) converted to a single html page with pandoc and a little css
markdown
- Autogenerated TOC at the top if I want to link someone to a section, which is just an anchor. I use ctrl+f for myself
- It is 188K and has no pictures so it works perfectly on slow connections. 50 pages if printed to PDF
Other venture firms are investors into the YC funds so nothing is private. I have heard that certain firms get lists of top companies around demo day.

Everything you say to a VC should be assumed to be public information.
There isn't a guarantee that the economic impact will be over after the next few months. But someone who is in really good shape but still eligible for the money could donate all or part of it to charity.
The looks pretty neat. Is this a pretty wrapper for the Erlang Observer, or is it more than that?
That’s a form of No True Scotsman. You have an idea of what “security research” is supposed to mean based on the kinds that have been profitable to you and the acquaintances you keep etc. As someone without skin in this game, I appreciate traditional security research but also muckrakers, immediate disclosure, and many other forms of holding bad actors to account. I don’t care what this is called but I’m glad that Hussein did it.
So I guess you could use https://github.com/azac/cobol-on-wheelchair and develop your entire app in a Worker. Great!
No country except Iceland or South Korea knows how many are infected, everyone else's numbers are horribly wrong.

But death numbers and hospitalization numbers don't lie. Sure, different countries are counting deaths differently, making it hard to compare them to each other, but the trajectories don't lie. And if you look at growth trajectories, no country is experiencing uncontrolled exponential growth at this point: https://ourworldindata.org/grapher/covid-daily-deaths-trajec...

If deaths are on a downward trajectory, it means that infections have been on a downward trajectory for weeks. And that's how we can know that it's controlled, without knowing how many have it or have had it, while being asymptomatic.
But windows has power profiles, intel utilities to undervolt and limit boost clock
Generally speaking it’s better to keep it plugged in than to repeatedly charge and discharge it. But it’s even better to keep in plugged in at 80% charge instead of 100%.
Sounds better than typical but not "cherry-picked" either, for the people treated-- of 125 patients:

>She added: “Most of our patients are severe and most of them are leaving at six days, so that tells us duration of therapy doesn’t have to be 10 days. We have very few that went out to 10 days, maybe three,” she said.

So again, not conclusive, but sounds like it is surprising medical professionals used to seeing 10 day stays for COVID patients.
Hey, I'm old and operate in a space where most things run at single Mhz speed (but have to work underwater, in a vacuum, and other interesting places).

What does your service do? Is it like VNCing into my dev box in the shop, except (I hope) more responsive?
I am a layperson, so the answer is probably painfully obvious, but why can't e-mail have TLS-style key exchange, where the sender's server gets the public key from the recipient's server and encrypts the message with it before sending it over?

The recipient could keep their private key secure so that only their client could decrypt the messages, and take the risk of losing access to those messages if they lose their private key.

Or they could let their provider hold onto a copy of the private key so they don't ever have to worry about losing it, with the trade-off that the provider could decrypt their e-mails.

But either option requires zero user interaction on the sender's or recipient's part past "login and send" or "login and receive", while limiting decryption to the recipient and maybe their provider.
GitHub Satellite is completely free this year
Can someone explain me why whenever SQL is mentioned then always somebody talks about SQLi?

like query parametrisation is supported by everything, database user can be read only

additionally if you want to go hard, then you can always compare ASTs generated query from user with query that's exposed by that endpoint

Why SQL Injection is still a thing?
Sure but that is irrelevant. It is absolutely certain that the rate of most diseases associated with increased Covid19 risks is much lower in the active army than in the general population, even if it is not 0.
Median or mean?
We also don't Shelter in place for flu. Bay Area school closure date is 1 day before SIP.

Sweden and Iceland never closed schools for young kids. Data doesn't look any different.
That would be the biggest challenge I would think. When ever I've been involved in funding rounds the investors are always trying to eek out every possible bit of signalling they can.
The argument "0" is not automatically converted to the right type unless there is a prototype in scope. It isn't as important in this case because it is highly likely that the appropriate prototype has been #included, but it is a bigger deal if we're dealing with arguments for a variadic function. Anyway, it's good to be reminded what the declared types are.
Yeah, I think we should be more careful with using the word "asymptomatic" as that is quite different from "presymptomatic".

AFAIK COVID seems to have some case where people are purely "asymptomatic", but with this current hot topic of symptoms or not, lots of articles are writing about presymptomatic people they assume will be asymptomatic. Confusing.
> with the permission of the building management

It makes me angry that's all the permission they think they need - and even more so that it's all they are probably legally required to need.
YC is supposed to be an exclusive program funding companies they believe will work.

I find it interesting that they choose to change their investing program instead of changing their application program. Why not keep the program smaller and more exclusive instead?
> As a penetration tester though I like GraphQL, it's a very handy data exfiltration engine. By default, there's no authorization, no authentication, and it even comes with introspection. One query and I get your entire schema! This trendy movement will be far worse for data security than SQL injection, unsecured S3 buckets, or misconfigured NoSQL instances.

All of that has nothing to do with GraphQL though, it's just poor security. You'd have the exact same issue with classic REST, SOAP, or whatever protocol one is using. I imagine the issue is that people are using "convenience" frameworks on top of their GraphQL libraries that do the glue between their databases and GraphQL and these frameworks don't have security as a priority.

Development-wise I'd argue that the less endpoints, the more secure, but it doesn't mean an app should have the exact same GraphQL endpoint for both its admin and its user facing data.

The principle of the least privilege will always apply along with a rigorous security audit, code audit and third party lib audit.
Thanks for the "Secret link of the day" ! I had a good laugh ! It's been a long time...
This is something I have heard about but have yet to experience. Maybe my charging habits are too irregular.
What if the tables your API queried were actually views? You could do the same faking of data during migrations of the underlying data (structure) and the client should not be effected.
I even used this for a family call the other day to clip someone's dumb joke and share it later with fam.
It is a very bad book for learning C.
Please see here
http://www.iso-9899.info/wiki/Main_Page
If I could just remove and replace a battery then I wouldn't have to give my laptop to someone else. I always put in a separately bought SSD in a laptop, so that I am able to remove my data in case of a (warranty) repair by someone else who doesn't do the repair in front of me.
Show HN: JHP, ultra-simple static site rendering in JavaScript
I was gonna ask pc directly about this, but chargebacks are a major vector of online abuse especially for livestreaming/influencer donations and such, and I was wondering how well Stripe's Chargeback Protection has worked to defeat this if anyone's signed up for the 0.4% cut to get around this. Is it a no-brainer, what's people's experiences been, and are there other trade-offs than a bigger cut for Stripe (and less agonizing over chargebacks)?

https://news.ycombinator.com/item?id=20082032
Existence doesn't exclude filtering beyond filtering every case
Pretty much. Earth's reducing, oxygenating atmosphere is an anomaly that did not exist before stromataliths.

https://en.wikipedia.org/wiki/Stromatolite#cite_ref-PiP_15-1
If they are only taking pro rata, it has to be post term sheet. No reason why YC would commit early.
Too late to edit but this would explain the huge uncertainty in the dormancy period, early reports were anywhere from 3 to 20 days, this was the range that inspired the 14 day quarantine procedure.

But if 80% of cases are asymptomatic that could mean that all of the underlying numbers are wrong given the continued lack of tests in many countries including the US.
The code and logic of games can be open source (look at Dwarf Fortress or ports of Doom) while the assets are still closed source. The bigger fear I always see is that someone will steal the code and run it without paying. In reality, this almost never happens. People don't care enough to run their own version of the game, or any other software.
Bolsonaro fires health minister, calls to reopen economy
Scuttlebutt is that the Republican Party has told Trump that if he wishes to remain their candidate for November, he's got to help replenish the ranks of low intelligence voters to make up for the ones he's killed with COVID-19. Increased environmental pollution is a good way to do this.
To add to Ken's comment, you can add a USD bank account (in addition to your CAD account) in your dashboard settings and your USD transactions will settle into USD without any conversion fees. If you click on 'Add bank account' in the payouts tab [0], there's an option to add a USD account. CAD transactions will automatically settle in the CAD account associated with Stripe. USD transactions will automatically settle in your USD account associated with Stripe.

[0]https://dashboard.stripe.com/settings/payouts

Source: I work at Stripe
This is pretty cool!

I might be able to learn from your outer loop, actually--this is close to a much simpler problem I've needed to solve.

I take my notes in markdown bulleted lists, and try to make them very narrow so they fit on the side of my monitor. I shorten all my links to keep the character count down. The shortener we use at work times out the links if they're not used, though, so in old notes I can go back and discover my alias is gone.

I've been meaning to write something that just sweeps my notes and hits the links through the shortener URL periodically as a keepalive. Since the notes are not always conveniently in one tree with nothing else around, I was thinking something a little richer than text extraction piped to curl.

If nothing else, maybe this'll inspire me to get off my ass and actually get it done.
Sure, but there is also no reason to believe that they are. There is however very good reason to believe that testing is skewed by age.
Most debit cards in Poland are standard Visa or Mastercard and definitely work online, sometimes you just need to activate them before the first payment for security reasons, but you're right that Blik seems to be getting more and more traction recently.
But it doesn't; no collective entity is equivalent to its pieces. In law or in practice. It's only an analogy.
No one was holding their breath for a program that finds n-bit binary squares that are palindromatic, but this kind of mucking about can be useful as exercise and as a source of new insights, both of which will aid the programmer in achieving more ambitious goals.

The musician doesn't noodle around randomly or repeat uninteresting exercises with the ambition that that in itself is going to constitute a meaningful and memorable work.
sudo, like "i sweat" in spanish
It's been my experience when going through old notes files that "dead" links are not always dead; sometimes they've just "changed their name". Sometimes a search on the title will find the website of interest at a new location. Sometimes the website can be found in the Internet Archive.
That is sadly related to the fact that email as a platform is pretty much dead outside small niches. Very few applications are built on top of email. Of course that is also chicken and egg problem; without good security story its bit difficult to build anything on it these days.
> needlessly limiting

What looks simple from the outside is often much harder when you actually do it.

I assume the stores want to sell as much as possible, from greed if nothing else. If there are bottlenecks in making that happen, they're probably hard to overcome quickly.

...I guess I just got annoyed by the word "needlessly"...
Then how did they recover? If your body has no antibodies to the virus then why would the virus ever stop spreading within you?
Just the writing...nobody talks like this...

"I want to know just one thing. Can you read electron micrographs as well as you can run?"

"Captain Salt, if you fail to
observe strict decontamination
protocol, three things can happen.
First, you can be court-martialed.
Second, you can die from this
horrible disease. Third, and
worst of all, you can incur my
displeasure"

Ugh.
have you considered using a laptop cooler? If you get two large fans they will be quite quiet.

I have found that "gaming" on my macbook almost requires it as for whatever reason, the system will NOT spool up when intel gpu gets hot.
Yeah I think fair to charge the customer more to access more of the total battery capacity because Tesla is now assuming more warranty risk on the battery.
What a weird coincidence seeing a comment about mergeable sections today...

A patch I helped review that's related to this in LLVM just landed today: https://reviews.llvm.org/D72194. (LLVM previously had support, but would perform bad merges in specific and rare edge cases; that patch fixes those cases).

Also, note that you need a custom linker script to define those symbols (__start_some_array, __stop_some_array). The Linux kernel does this, as noted in: https://nickdesaulniers.github.io/blog/2020/04/06/off-by-two...
PostgREST can look closer to SQL. For example this query:

select
time,
device_id,
humidity
from conditions
where
humidity > 90 and
time < '2016-11-16'
order by time desc
limit 10;

Can be expressed as this request:

curl -G "/conditions" \
-d select=time,device_id,humidity \
-d humidity=gt.90 \
-d time=lt.2016-11-16 \
-d order=time.desc \
-d limit=10

In long form without curl:

/conditions?select=time,device_id,humidity&humidity=gt.90&time=lt.2016-11-16&order=time.desc&limit=10

Taken from: http://postgrest.org/en/v5.2/integrations/timescaledb.html#p....
Also 0% with asthma, obesity, diabetes, etc.
Yes I'm curious on the number of users too!
What is the recommended best practice for a stable API endpoint that supports things like filters, pagination, and some limited aggregation?

Would a REST-like endpoint backed by a database VIEW (to decouple schema changes from API changes) be a good approach?
This is great! I would love to see a version where you can Sync Spotify playlists & have the fitness instructor teach live
Building well-architected serverless applications (Multi-part Series)
this is pretty sweet stuff ed and team!
>Built-in batteries allow for custom battery shapes that increase battery life or allow for thinner computers at the same battery life.

Why not putting these bag shaped battery cells in a plastic case? Couldn't this case still have any shape?
That’s a good argument.
Alaska’s struggling timber industry can now hit pause on federal contracts
Counterpoint: SSH, HTTPS, SMTPS, IMAPS, etc, all require no more interaction from the user than their insecure counterparts.
The only thing they screwed up on was not telling people they were throttling. They're still doing it (which is good).
If there’s a lot of uncounted asymptotic cases the IFR is correspondingly lower.
Furthermore, your "view models", whether their are displayed as json payload or transformed through HTML templating server-side are not and should not be your "database models". This is to me where just using SQL from the front-end doesn't really make sense.
I thought it was strictly one character per 32-bit code.
Anyway, whatever it is called it is what wchar_t should be.
Coronavirus mutation found in India could threaten the race to develop vaccine
NO. If solar wind caused a gas layer to evaporate, Earth shouldn't have the atmosphere it does. This planet should be like those surrounding it. Those same solar winds/radiation would have made sure of that. The issue I have with this is the same issue I have with evolution. If conditions were not created to favor life why are we the only planet with any known life & which is perfectly suited to a variety of life? Do you really think that's a coincidence? Scientists are constantly coming up with one ridiculous theory after another to explain why no evidence of life has been found outside our planet instead of just acknowledging that this planet is unique because it was designed that way.
Adding any layer for clients to fetch data introduces another layer of complexity and if you have graphql purely to surface something that could be queried directly then it is definitely overhead.

Where I see graphql shine is:

1. reducing large payloads to only the data you need

2. combining responses from many different sources into one query - especially when these might all talk different protocols, one sql, one nosql, one http etc

Is graphql the only solution to this? No
Is graphql designed pretty well to make this simple? Yes
I am 52, male. Started wearing wooden clogs a couple of years ago, as I was experiencing similar symptoms as OP. Life-changing experience, this has been. My advice to OP: dispose of your sneakers and all of your comfy shoes. Wear nothing but wooden clogs instead.
There are no studies that have suggested anything like this. There simply has not been sufficient time to perform a study of the type needed to prove such a claim: you would need to gather a cohort of people that you know had the virus, wait for them to recover, then test for antibodies.

Moreover, even if the percentage of such people were shockingly high (i.e. over a fraction of a percentage), you would need to conduct a huge survey to distinguish it from error rates on the tests themselves.
They do not promise anonymous transfers. They promise encrypted transfers.
I truly don't understand why so many people think it will be a V-shaped recovery. It certainly can happen (everything can), but have they looked at the data? Nobody alive has ever seen this kind of volatility in the "fundamentals", and not just in some of them - in all of them. Literally, doesn't matter what you look at, as long as it has a fresh enough measurement.

Social and political volatility is not here yet, but the potential is huge.

Financial volatility is currently hiding / being suppressed, but again, the potential is massive. I'm not just talking about a normal white swan like a stock market drop - I'm talking about the "true black swans", like a potential collapse of the current iteration of the concept of money.
So now if you are a YC company and YC declines to invest, every other investor loses out.

Does this not strongly dilute the power of being in YC? Seems nuts to me. Why not just shrink the number of incoming companies?
Public internet access, both in the form of hotspots and computers, are perfectly usable (if not terribly secure). But you cannot use Signal with a payphone.
Antibodies are produced by the humoral arm of the immune system, but there is another arm:

https://en.wikipedia.org/wiki/Cell-mediated_immunity

Basically this other arm tells infected cells to kill themselves, and they comply.
We blew about 10k per event to be an exhibitor at trade shows. It was like speed dating for customers. We landed one good customer that way and scrambled to deliver, but ultimately it was a worth it. You learn what the customers care about and how to pitch very quickly.
That has literally nothing to do with what he said.

Asking people to forego whatever small advantages they have-- because others don't-- is foolish, IMO.
The timeline matches aggressive control measures that reduced infection.
A different type of dance move
It's not a pattern of ratio or composition, it's a pattern of the quantity of each individual component. The individual quantities then constitute the composition.

For CO2, the pattern is temperature. Titan, Triton, Pluto are well below CO2's freezing point so it stays on the surface as ice instead of atmosphere. At these temperatures, nitrogen is the heaviest abundant molecule that remains gaseous, followed by methane. If you're warm enough for gaseous CO2, you have it. The only exception is Earth and that's because plant life absorbed it and emitted O2 instead.

For nitrogen, methane, argon, the pattern is mass. Only Venus and Earth have enough mass to hold on to those, compared to heavier CO2. Venus and Earth have similar quantities of those. Venus's excess of CO2 comes from temperature high enough to evaporate carbon and oxygen from rock compounds.
Fauci: I don't think we should shake hands 'ever again'
AT the very least, YC use this site as an exclusive recruiting tool for YC backed companies "Another kind of job ad is reserved for YC-funded startups. These appear on the front page, but are not stories: they have no vote arrows, points, or comments.", and as a way to build their own reputation amongst a particular section of the tech/software community.

Pac Man in a boot sector and similar stories keep you (and me) coming back here.

Both of these objectives are not targeted at investors, but are without doubt helpful in assisting YC backed companies find and hire "A players" at a higher rate that they'd be able to without this site, and that is almost certainly a significant factor in some/all of their 100x (or 20x or 3x) successes.

And if you don't think blackhat SEO-type spammers wouldn't destroy this site in a heartbeat if they had an accurate understanding of the algorithms and tools used to moderate it, perhaps you should cast your mind back to the days before SEOs and Google "ruined the internet". :sigh:
That's what [u]intptr_t is for.
The Far Right and Clearview