skysight-inc/HackerNews huggingface dataset:
previous discussion http://news.ycombinator.com/item?id=2921506
I'm obviously not tptacek, but I take his statement to mean that currently, PCI finds the following scenario acceptable:

You have a site that takes payment info. Rather than process that information directly and store it you decide to use a service like this to silo out payment processing. This keeps your main environment outside of the scope of a PCI audit (as the only systems in scope for PCI are systems which either process or store payment card information).

You are now not under any obligation to ensure that your application isn't riddled with security vulnerabilities, including vulnerabilities like cross-site scripting which would completely undermine the security of using a third-party javascript library to handle payment processing. This isn't some sci-fi scenario either, I see this every day in the applications I test (mostly e-commerce and online banking applications).

Using the library hasn't introduced any "new" vulnerabilities into your environment, but it has given you an opt-out to actually trying to have a secure system.

He seems to take exception to the fact that PCI doesn't see any problem with this. It's basically a loophole to continue to deploy hole-riddled applications that once hacked, you can say "We are PCI compliant, what are you gonna do."

This gives credence to the people who argue that PCI isn't really a security standard, but just a way to shift blame after a breach.
How to Watch Blu-ray Movies on iPad 1/2
> in the Vegas analogy I’m Hunter S. Thomson

No, you are not.
Ask HN: The Difference Between Startup & Side Project?
Just a general question; many times I see someone setup a Yahoo store and call it a startup. What's your opinion on where to draw that thin line?
Tax burden is not a vague term. They define it in the charts. Total tax burden is the percent of GDP that is tax revenue. The link you gave talks about effective tax rate. This is very much different than the percent of GDP collected in taxes.
People don't think of software ecosystems as quasi-organic things.

To be regarded the same way as a long relationship with a cranky friend, maintaining an aging specimen tree, or a historic house.

Do you cut the branch off, or just prune it back a little?
Very speculative article.

HTML5 is definitely becoming more capable, enough to rival some of the larger players. Still, a cross-platform toolkit doesn't deprecate dedicated frameworks. There's a reason why applications on my Macintosh are different than Windows, have the same overall theme, and are better integrated with the OS. It's the platform experience that makes a good user experience.

Since cross-platform toolkits haven't had much luck historically, the only other benefit HTML5 has is its existence outside of App Stores-- which if you're in the minority of apps to be rejected is a boon, but does not do many favors to the thousands of developers making good money from their apps.

HTML5 is not a platform. Facebook's project Spartan, for example, is a platform, and that might have some success rivaling iOS/Android/Kindle. But that's the difference.
Ask HN: Basic Spreadsheets/Data Management for Startups
Hey HN. I'm the more technical of my company's two founders, and I'm the one who handles all of our spreadsheets and other misc data. My partner is exceedingly bright and motivated, but seems to have a mental block when it comes to Excel/Google Spreadsheets. I'd love some resources that I could point him to. Sure, I could just fire up the ol' google search, but I'd really like specific links that might even be tailored to entrepreneurs.

In addition, I'd also like to show him some articles about what to -do- with data once we have it. Kevin Owocki had a great piece about logging everything so you can manage everything, and I'd love to show my partner more pieces like that.

I'm not a frequent poster, so if I've missed a vital piece of Ask HN etiquette, yell at me.
Yes; but playing is not passively staring at the world, nor does it involve a lack of exertion, nor yet again lack of a "passing acquaintance". The point of play is that you can exert yourself without having much hard work of willing it. A child with a new toy is highly engrossed, focused, and certainly not passive nor satisfied with a "passing acquaintance".

I guess I reacted to the screwed-up faces in particular; they looked like they were in pain.
That's a neat generator, but it occasionally generates almost entirely-blocked mazes. The density is impressive, but at that point you might as well just start reading IOCCC entries.
Congratulations on your official launch. I've been using Stripe for a while now and have chatted with several of you in the campfire room. You have always been extremely helpful, no matter what wildass time of the night I may decide to poke my head into the room.

I have nothing but good things to say about your service.

Thank you.
I work for a bank. If Silk does indeed terminate SSL, we will block this browser from accessing online banking. We block OperaMini browsers, which also terminate SSL, for exactly the same reason - your sign-on credentials will be IN THE CLEAR on a 3rd party site.

As the bank is the one offering the security guarantee and talking the risk, we cannot afford to have credentials in the clear on some else's site -- ever.
If it ain't got macros, then it ain't a Lisp. Javascript is definitely no Lisp, but I really like that it allows function composition, which is somehow reminiscent of a Lisp.
f(g(h(x))); instead of (f (g (h x)))
I fully agree. We track millions of events per day and I use hive and hadoop to do my analysis. Not as user friendly but putting the data into a pivot table helps alot.
I think I disagree with what he's saying here. When someone takes pride in their craft and craftmanship, that care and thoughtfulness tends to bubble up to the surface for users.

You can see the difference between a chair made by hand by a carpenter who wanted to make the perfect chair and one made by a carpenter who wanted to get it over with.

Now on the other hand, you have two extreme ends:

1) The 'architect' who creates 4 layers of class hierarchies and factory-factories

2) And the guy who doesn't indent his code and types all of it in notepad.exe

I guess the key is to take pride and put thoughtfulness into what you do without losing sight of the fact that there's a end-user at the end who needs to use your work.
Single psilocybin dose may make lasting personality change
It is just interesting seeing it at work. I get 1% cash-back on all purchases, and 2% on some others. I've already save up quite a bit on my cash-back, more-so than I have earned in interest on my savings account with 10k+ in it.

I am not even spending an absurd amount, just what I need to survive, and bills.
SpaceX's Elon Musk discusses “Future of Human Spaceflight” at press club
You're absolutely right of course, but I don't think this is hopelessly naive, especially coming from such a respected developer. I see it more as a nice, bite-sized rant that lets off some steam, makes us laugh at ourselves, and has a nice bite of truth to it. I see it as cathartic rather than ignorant.
Twitter’s ad revenue to touch $400 million mark by 2013
Not an expert on this subject, but the landing phase requires much less fuel than take-off. You only need to slow the craft and during the final approach use fine grain thrusters to maintain control.

I do hope this is feasible.
Why No Kindle Touch Or Fire For EU, UK?
FWIW the US portion of INGDirect was purchased by Capital One.
Part of JS's popularity is definitely politics... the fact it's in the browser gives it a huge shot in the arm.

It's a decent language, though. Here's a comparison of JS to Ruby for some of the stuff people generally love Ruby for. JS comes out looking pretty decent.

http://fingernailsinoatmeal.com/post/292301859/metaprogrammi...
I have seen most people with degrees and especially brilliant ones hesitate to take risks.

Probably that's because they feel after all the hardwork its better to have some safer alternatives than risks which don't necessarily guarantee returns.

Now don't ask me to come up with survey/research paper. No one goes out and spends time/money/energy to prove each debating point.

But I agree with you as well, there is no co relation between them. But unfortunately truth is often stranger than fiction.
Um, pretty much every C-derived language supports function composition, and uses that syntax for it. Am I missing something?
Clearly time to go back to using cash! ;)
Interestingly, part of the reason Node.js used JS was that JS didn't have a ready-made standard library so it made a clean break from a lot of the styles of the past. Node was an opportunity to force a community to rethink a lot of things.
Website Traffic Course
Please don't perpetuate the myth that Apple wasn't going to provide a SDK and only because of public pressure did they release one.

Just because there was no SDK when the iPhone shipped in June 2007 doesn't mean they hadn't planned to release one all along, which of course they did.

And just for the record, Apple released the first version of the iPhone SDK in March 2008, just 9 months after the iPhone shipped. That's an awfully quick turnaround for a company that supposedly wasn't going to release a SDK at all until there was pressure.
Academic Earth: Entrepreneurship
When discussing "bold action" to save the economy, we should really be reevaluating the incentives of the traders on Wall Street.
This makes me think of Mark Cuban's article "What Business is Wall Street In?"

http://blogmaverick.com/2011/08/08/what-business-is-wall-str...

These traders on Wall Street have little interest in creating capital for the companies that stem innovation. Their main incentive is profit, even if it means making money off economic downswings. We need to put them back on the proper track via taxes or a complete restructuring of the capital gains system.
I enjoyed the part where Phil provides us with the quote ("Some even say the Web is ‘dead meat’.") even though Joe Hewitt never said that, and that wasn't what he argued in his piece.
What he said. :)
If anything suggests a chink is developing in their armour, it is the lawsuits against Samsung, which are sounding more and more childish and desparate. Plus knowledge of the Kindle Fire on the horizon.
Open source certain modules is a possibility.
I see what you mean. explaining the problem the product solves is a good idea. Thanks
Our problem here is the overloaded nature of the word "play". I do not disagree that children learn through play. But I'm using the word differently in my presentation: I'm using it to refer to activities that you (as an adult) pursue casually, as a way to relax or enjoy yourself. If you play the guitar very well, for instance, you might take an hour in the evening to just "play", singing along, etc. This serves many purposes, and is definitely valuable, well-spent time, but it does not serve to improve your guitar playing. To accomplish that, you'd need to spend some time working on guitar techniques that you are less accomplished at.

You can see my problem, hopefully. Ambiguity in language has been the downfall of more than one well-intentioned presenter!
The Patriot Act.
Definitely, most of the identifiability comes from data only available from JavaScript such as the combination of screen resolution and available fonts.
I saw Elon give a talk about colonizing Mars at a Mars Society conference at Stanford 10 years ago, before he founded SpaceX. He's thinking long-term.
Yes. Google walmart "moving pennies" and click on the first result
Awesome Wii stuff Online
Facebook created this issue... now we're supposed to thank them for addressing it after it was revealed in public?
I upgraded from Ubuntu 9.04 to 11.04 (I think) with a bunch of commands without a problem. Couple of reboot and that was it. God that felt good (all of that on Linode). When I compare that to sysadmin / installing Linux or some Unix ...
Don't forget "third world" countries like South Africa :)
Wow... very useful points. Thank you for posting.

I will work on the whys.

I wonder what the bugs are in IE? is the layout disturbed? or are any of the modules not loading? Can you tell me your IE version please?

I am adding influence based on circulation in the next release.

I will work on including more info on the home page. may be a video.

The page load time issue... is it the dashboard or the "add keyword" functionality?

Thanks again.
If there was a 'proper' way to configure your editor, then that proper way would be the default.
The only problem I see is that why would anyone want to use it. There are so many (and I mean really many) daily deal websites out there now that sell just about anything; chances are most people can find what they want at the price they desire, or at least close enough to beat inputting a bunch of numbers into a third-party website and waiting for some conclusion that may not even materialize.
Indeed. Lisp is a simple language that can be completely defined in half a page. A naive implementation takes less than a thousand lines of code. The language is homoiconic, i.e, there's no difference between programs and data -- everything is a list. This enables programmers to perform complex transformations on code using macros. Lisp compilers such as SBCL generate code that is almost as fast as C++. Oh, and the original Lisp as described by McCarthy is strictly rooted in mathematics. If you limit yourself to writing only a subset of Common Lisp/Scheme -- one that emphasizes immutability and recursive functions on lists of symbols -- it is possible to use formal methods to prove the correctness of your code.

None of that is true for JS. I don't think Crockford thought his remark through.
Nice drunk post.
A google search gives a lot of results, but I think you mean this: http://www.amazon.com/Red-Moon-Rising-Sputnik-Rivalries/dp/0...

Is this true?
Unix is very easy if you take time to learn it. Most things behave the same way.
Foxconn may produce Amazon 10.1" tablet after having passed on Kindle Fire
Is Vision Security a Scam? ...The Truth Revealed
The public SDK could have been delivered easily in 9 months as the Apple devs themselves had to be using something, so many of the decisions would have been already hardened. Plus iOS wasn't a completely new system it shares core components with OSX.

Id hazard a guess the 9 months was more than luckily 9 months security testing than developing an API for the public.
Unix (for example) was most certainly designed around the constraints of hardware at the time.

Furthermore it is a physical limitation for how much software you can write (and have it work) if you can get something that "mostly works" by building on top of yesterday's cruft then you do it, since the alternative is starting over from scratch and not being able to finish.
Poll for Yea / Nay of HN's? Anonymous?

Some LSD discussions
http://news.ycombinator.com/item?id=695947
http://apps.ycombinator.com/item?id=895962 (v sensory deprivation)
Android is forcing nerds to become artistic
Youtube link...

http://www.youtube.com/watch?v=p176UpWQOs4
Chrome is the fastest where it really matters - javascript, and by a huge margin.

Who cares if browser startup takes 3 or 6 seconds? I start my browser in the morning, and never close it.

And who really cares if some browser eats 50% more RAM? RAM is ridiculously cheap, 8GB of laptop memory with the highest reviews on newegg is $40.
It's supposed to be on the order of one to two percent of the program cost, depending on exactly what fuel you use and how often you fly.
> The are numerous examples of countries having a larger debt to GDP ratio than the United States who recovered nicely from such debt ratio.

The US debt to GDP ratio is rapidly approaching 100%

http://www.usgovernmentspending.com/federal_debt_chart.html

Once it hits 100% it's only a short walk to becoming a country not a lot unlike Greece:

http://www.tradingeconomics.com/greece/government-debt-to-gd...
I thought this type of research had been outlawed.

Glad it still occurs. I see a lot of potential for this sort of stuff both in term of developing new therapies, but also in the sense of doing controlled experiments to better understand perception and cognition in humans.
There's nothing magical about the fuel supply. In the past, people didn't try to bring rockets back down and land them on their tails because of the technical challenges, not because of fuel concerns.

It takes a lot less fuel to land than to take off for two reasons: wind resistance helps instead of hinders and so much fuel has already been burnt that there is a lot less weight to slow down than there was to accelerate on the way up.
Maybe for the drugs
>I'm not sure I follow how this is supposed to be progress. This looks like NASA did before the had real shuttles...

That's not exactly an engineering critique. Yes, it's progress - sometimes you have to go back to where you took a wrong turn.
I Once Ate A Man In Korea
EBay Store Design-Ebay Shop Design-Custom eBay Store Design-Ebay Shop
Specialized in eBay store design, ebay shop design, ebay storefront design, ebay store page design, ebay templates, header banner, eBay listing templates design and ebay seller logo design. eShop Designer is one stop eCommerce shop for ebay seller
Get a Twitter username for your Stylate domain
Yeah, but you have to clear your browser and reload. The instructions are here: http://deliciousengineering.blogspot.com/ under "Firefox Extension Fixed." They claim that the IE extension is fixed as well, but there seem to be no special instructions.
The implication is 'proper for you'. One size fits all ... doesn't. But everyone should shape his tools to fit himself.
The ACM and me (on refusal to publish arXived public domain papers)
To quote Steve Ballmer: "I've got four words for you: I LOVE THIS COMPANY!"
Casio's G'zOne Commando Gets Gingerbread
Here’s the thing. For 799 million of the 800 million users out there (many millions are dogs and fictional characters and aliases - but I digress), Facebook is just a place to send notes to their friends, post photos, see how fat high school classmates got over the years, etc. They don’t realize that if they said to one of their friends on Facebook "I’m thinking of selling my house" and then suddenly ads appear next to her profile and emails are sent to her Inbox from brokers attempting to get her business - that there is a connection. And that little note that was sent to a friend will haunt that person forever. It’s like in Glengarry Glen Ross when the salesmen just keep calling on this poor family over and over again whose only crime was filling out an information card and asking for a brochure. It’s just too much - that’s all. Facebook should be stopped...
http://mankabros.com/blogs/onmedea/2011/09/01/facebook-must-...
Have Monkeys Typed Shakespeare?
You're right. I meant to say passing first-class functions as arguments, rather than pointers to functions as you would in C or an object method as you would in Java.
worked on FF 3.6.17, which version/platform?
So Pythonn standard library can read Windows Installer files
Amazon in talks with HP to buy Palm
Disrupt which market? The enterprise market?

The enterprise market is paying for this level of service and $150K a year is a drop in the bucket. They are already paying it for Omniture and they pay it for the support that comes with it.

Providing a similar product of sufficient maturity with the same level of support (eg. human support) at a far lower price is not feasible, IMO.

Plus, the free product is already there. It's pretty hard to disrupt something that's already free.

To answer your other question, Urchin was around $500 / month for the hosted version and $5K for the installable version.
Cool Site of the Day - 9/30/11: BAD LIP READING
If there was a 'proper' way to configure your editor, then that proper way would be the default.

There's a proper way to tailor a suit, but no one expects an off-the-rack
suit to fit everyone.

Some people want computers and software to be just like household appliances, but seem oblivious to the rants people have about appliances (stupid settings, no way way to config, lowest-common-denominator, one-size-firs-none, yadda yadda yadda).

Yeah, I get pissed at computers and software at times, but other times I'm awestruck at just what amazing things we can do.

Overall, we're winning.
zsh on OSX can do it.
Yes and yes. We are a PCI Level 1 Service Provider. More information on our security practices: https://stripe.com/security
Ehm, ING Direct does free checking, Schwab does free checking, plenty of smaller credit unions do free checking as well. They are definitely not the only ones.
And yet...we put up with it. Because there isn't a better option. vs this is needless (from the article) doesn't really gel. If it's actually needless, then you know a better way of doing it - so publish it!

The problem with Unix is that it doesn't have a concept of a user.
Nope. It doesn't have a concept of a naive user. Table saws also don't have a concept of a naive user, but people don't bitch about folks trying to use a table saw without having to learn how first.
How would we react if one of the commercial missions goes wrong?

There must be a certain difference of standards, when a public organization kills people for science, and when a private company kills people for profit.
Beyond the Accounting Cost of, And The Low Automobile Insurance Rates
troll, perhaps? gave me a laugh
This is why I use the local credit union and avoid BoA like the plague.
I don't see the problem with VAT. Just keep rack of where your customers are and pay the VAT on those in Europe. Where does the payment processor come into it? If you owe VAT then pay it.
Personally, I think that it needs to be at least one person's full time job to be a legitimate start-up, as opposed to a side project where it may be one or more persons' part time gig.
I coded up a HipChat bot in < 100 lines of CoffeeScript. It leverages the existing module system to make plugin writing hilariously easy:

if msg[0] == '!'
[cmd, args...] = msg.slice(1).split(' ')
require("commands/#{cmd}").exec(chat, args)

Just add a coffee file to the commands directory and export an `exec` function which callc `chat.reply` -- couldn't be easier!
Daily Mobile Minute: A tale of two mobile strategies
Free RPG engine for fun or profit in GitHub
PlayBook price slashed to compete with Kindle Fire
Clearly you have never had to deposit a check with them while in Colorado ... they don't have a single branch in Colorado.
Why is every ZDNet article so wrong about Apple?
Anti Snore Pillow
The success of anti snoring pillows lies in their special orthopedic design. Their design is such that it is thinner in the center and thick at the edges. This design ensures that no matter in whatever position your sleep in your head and spinal column is kept in a straight line. This gives a clear passage to the air ways and helps you sleep better.
Not only an anti snore pillow helps you sleep without snoring it also relieves you of neck and shoulder pain. Sleeping on an anti-snore pillow means that not only you wake up refreshed in the morning, ready for a day’s work but let’s your partner also sleep in peace. Therefore, you get to avoid the problem of sleep disorder, diabetes, heart trouble, blood pressure that usually accompanies snoring.
They've had failed launches. They seem to keep on going full steam ahead.
Demonstrably untrue based on two and a half decades of experience. At least chasing lib dependencies for 18 hours during the config/make/make install process is mostly a thing of the past.
Forecast: How to use mobile to influence the future - with René Pinnell
Azaan (2011) Hindi Film Songs Mp3 Download
Silver vs Gold: David Morgan’s Panic Report