skysight-inc/HackerNews huggingface dataset:
PCI compliance is never a non-issue.

Even if you're using a third party provider that handles both credit card entry and processing, you need to comply with some subset of the PCI/DSS requirements.

In the case of terminal.shop it's not even true, since they can see the credit card number on their side, even if all they do is to forward that number to Stripe and forget about it.

For small and medium-sized merchants, PCI/DSS classifies different types of handling through the concept of which SAQ (Self-Assessment Questionnaire) you have to fill in. Different SAQ have different subset of requirements that you need to fulfill. For e-commerce use cases, there are generally 3 relevant SAQs, in order of strictness:

- SAQ A: Applicable when the merchant redirects payment requests to the payment processor's page or shows an iframe that is hosted by the processor. This is the level required for Stripe Checkout or Stripe Elements.

- SAQ A-EP: Applicable when the merchant handles input on the browser, but sends the data directly to the processor without letting it pass through the merchant's server. This is equivalent to the classic Stripe.js.

- SAQ D: Applicable when the card data is transmitted, stored or processed on the merchant's own server, even if the merchant just receives the card number and passes that on to the payment provider. Stripe calls this type of usage "Direct API Integration" [1].

The level of compliance required for terminal.shop should be SAQ-D for Merchants, which is quite onerous. It covers almost all of the full set of PCI/DSS requirements.

But even if a merchant just uses Stripe.js, the PCI SSC still cares about the possibility of an attacker siphoning card data from the merchant's site through an XSS vulnerability.

And even if the merchant is using an iframe or a redirect (with something like Stripe Checkout or Stripe Elements) there is still the possibility of hard-to-detect phishing, where an attacker could replace the iframe or redirect target with their own site, made to look exactly like Stripe.

---

[1] https://docs.stripe.com/security/guide
You might want to check out perplexity.AI. It has access to many of these models, and it’s trivial to switch models mid conversation and ask it to repeat itself, so that you can see the differences.
Location: Taipei (US citizen with Taiwan permanent residency)
Remote: Yes
Willing to relocate: Not at this time
Technologies: JavaScript/TypeScript, Node.js, Svelte/SvelteKit, Python, Rust, Java, SQL, and a mix of others.
Résumé/CV: http://thespatula.io/resume/resume-software.html
Email: tsbach@fastmail.com
Projects: https://www.thespatula.io/project-list/

Software developer turned high school CS teacher turned developer. I've been with a small Taipei startup working on a Node Express backend (TypeScript, Postgres with Kysely) for the last year and am looking for a change. Something at the intersection of tech and education would be desirable, but not required.
I use it a little too, but it’s not a huge boost. Maybe I’d feel differently if I had to churn out typescript.
They said they've spent 10 years developing scoring software... Wtf
I get

"Error occurred processing text500"

no matter what I put into it.
https://www.youtube.com/watch?v=L5yislIOui8

A carnival show where a motorcycle rides inside a conical well.

In lunar gravity you can probably do (some of) it without the motorcycle.
Location: NYC
Remote: Willing
Willing to relocate: Yes (US only)
Résumé/CV: https://michaelbjames.com/files/michaelbjamesresume.pdf
Email: hello-at-michaelbjames-dot-com

I work on human-AI collaborative programming. My PhD research built a theoretical framework to understand how programmers use Copilot. I extended this framework to improve the experience using an AI programming assistant.

I want to continue improving the lives of developers through a combination of both probabilistic and formal AI techniques.

Seeking: Research Engineer / Research Scientist / AI Engineer / AI Scientist roles.
> People aren’t rational actors by and large, and it’s a mistake to assume they can be modeled as such in many cases.

You'd still be on the hook explaining why you know what's better for people than they do.

> It sounds like you may not understand how the system works. It doesn’t cost the government anything, [...]

There are always opportunity costs. But what parts of the 'system' are you talking about?
I prefer gnome though. :) Cosmic is the only thing I might be interested in switching from gnome to.
What is the context window of a human?
You did the meme.

https://knowyourmeme.com/memes/smugjak-but-how-does-this-aff...
Detection of Depressive Episodes Through Pupillary Response in the Wild
HN discussion [0] (255 points, 3 days ago, 150 comments)

[0]: https://news.ycombinator.com/item?id=40197277
Fun fact if you take a board out of a Burroughs B6700/B6800 that you think is bad (has a bad chip) if you drop it flat on the floor, chips side up from 36" (about belt height) 9 times out of 10 the lid on the bad chip will fly off. Turns out the heat from a failing chip heats enough to release the glue.

YMMV on fixing a now 50 year old computer.
In particular this criminalizes calling the state of Israel a "racist state" in case there are any doubts about what a sham this is.
Youve raised some good points. I'll take them into consideration.
Is hake's remarkable recovery in the Atlantic a sign of hope for our oceans?
Simpler yet, just tell the model "Reply with 'Yes' or 'No'."
Oh you want remote? How about you work from India, how's that for remote.
Same here for San Francisco
In california prop 13 was created for older people, because their houses appreciated and could make living in their own house unaffordable. Sort of like "rent control" but for house taxes.

I think though that commercial properties got the best deal, because they can own a property for a much longer period of time.

It also gives an advantage to renting over buying, as rental properties generally have less money going to taxes than buying a new house.

I've heard from many people moving into a neighborhood, paying significantly more taxes than their neighbors, who have been there for years or decades.
If subjectively experiencing a dream were "the whole point" of sleep, that would make it pretty hard to explain why total sleep deprivation is fatal. Clearly there are far more important things going on physiologically during sleep.

Can dreams be therapeutic? I'd wager that happens just about as often as they're psychologically harmful. And both of those outcomes are far less frequent than completely forgetting your dreams.

A silly article.
> This is my daily struggle as a CTO

This is a nice humblebrag. Why does it matter that you are a CTO for this comment? It doesn't. It would better written as: "This is my daily struggle with my team."
Because we have enough evidence already to draw conclusions? Space exploration is expensive.
I don't have any suggestions for today, but I feel like web components that try to reveal themselves & be programmable would be by far the easiest clearest most obvious path towards such a user malleable system.
> I think your response is overly cynical. As the Oscar Wilde quote goes, a cynic is someone who knows the price of everything and the value of nothing. The FDA is far from perfect, but I have much more confidence buying a drug regulated by then than some pills sold at the convenient store.

I suggested that state level agencies can do that regulation. Why do you bring up the straw man of unregulated drugs?

Most countries are smaller than the US, and still manage to get safe drugs. In fact, many countries are even smaller than many US states. So it should be certainly possible for US states to regulate drugs. (Especially since they can cooperate, just like they do on traffic rules or the Uniform Commercial Code.)

I'm not sure why you want to paint my position here as some radical 'libertarian' fanatic? Even the Catholic Church likes subsidiarity, and it's (in theory) one of the guiding principles of the European Union. See https://en.wikipedia.org/wiki/Subsidiarity

> Again, I think this is overly cynical and lacking nuance. There is debate in the economics circles on how much a college credential is signal for culture fit and how much is signal fit skills. It’s far from settled, and almost certainly a mixture of the two.

Aren't you the cynical one? I am suggesting that most likely employers and employees ain't idiots and know what they are doing. And you suggest 'hold one, they probably are idiots'.

> I also disagree with the coordination piece at large scale. When societies get big enough, we don’t have the individual bandwidth to manage every interaction so we rely on institutions to shoulder some of that burden.

Sure, but that doesn't mean subsidising credentialism is the only way. We have examples from successful societies in other parts of the world and in other parts of history doing just fine with a lot less of that. So your argument from universal convergence doesn't fly, when there is no universal convergence in the first place.
Pay more for a lower-quality car than a higher-quality one. Marketing and other social conditioning, so woo-woo sounds about right. While there are certainly reasons to buy new cars over old in many cases (features, maintenance & ongoing costs), the main driver for new cars is prestige. In Thailand for instance, you wanted to leave the red dealer plates on for as long as possible, because everyone could see you have a new car.
The output of software cares not for whether it be a sentence or even just a word. The output of software has no care at all. What lead you to believe otherwise?
> So we're obviously missing something but we don't know what.

Isnt the answer dead simple though? Space is mostly empty. Everything is very far away and getting even further as the universe expands. If there were bits of life scattered around the universe I wouldnt expect contact between them.

The paradox seems to rely on the assumption that if aliens existed they would have colonized the entire universe by now but that seems like a huge leap when we look at ourselves.

Universe is almost 14B years old. Life on earth is almost 4b years old. There have been several mass extinction events which almost completely whiped out life. There are planets in our system that may have had life but would have died off a very long time ago. Its kind of remarkable that we are here and how much progress we’ve made. We are certainly fitter than average (survivorship bias proves that). Yet we are nowhere even remotely close of expanding out into the solar system and beyond. And how could we, if virtually all of that space is void of resources we need to survive? Why is it inevitable that some alien would have solved that?
This has been going on for at least 25 years.

Search the internet for jwz cadt.
Spirit Aerosystems: the part Boeing spun off because even it did its own thing. Without the public profile of Boeing, it must have been an even more hostile place to be.
The problem is that the model we’re using now is locked in the world’s most secure HSM and you can’t use several copies at once.
what year was greed invented?
Cognition: A new antisyntax language redefining metaprogramming
Like the first gen Apple watch, or a convertible car. it doesn't work in a lot of scenarios, but for the ones where it does, it absolutely shines. A generation or three later, it'd be better, for sure, but early adopters have to give up some things to be that early. I just don't know why they had to force it to be independent of your smartphone this early in its lifecycle. It's an accessory, like a smartwatch, and sure, a later generation could operate independently, just like there's an LTE Apple watch, but that's not where they are yet.
It doesn't have to be a good joke to understand the joke. those are separate qualities.
You probably know this already, but for a while people were toying with the idea of a "childbirth centrifuge". https://patents.google.com/patent/US3216423A/en

There's probably a reason it never caught on.
One question is: if you build on the easement who is going to sue you? The public? The city? Who's going to bother?

Or is the issue that it'll come up in the title search and you won't be able to get title insurance, which will cause problem with the loan?

In any case deed restrictions get invalidated all the time. The racist ones are null and void, for example.
Presumably someone has a claim for damages if the covenant is violated, in which case they have a future interest in it. If no-one can enforce the covenant, well, it might as well not exist.
If it worked like a dream for you why would this be an issue for you? You can easily create a edge cases for any distribution including Debian.
Quite the opposite: notice how they carefully avoided saying anything quantifiable? Southern California is a huge region covering tens of thousands of square miles and over 20 million residents – how could any single person claim to be a primary source for even 1% of that?
SEEKING WORK - Fractional CTO & Fullstack developer - REMOTE (Australian based)

I’m a seasoned Fullstack Developer with over 10 years of industry experience, including roles as a CTO and a startup founder. I specialise in crafting elegant and scalable web solutions, perfectly tailored to meet the demands of your business.

As a former CTO, I bring a strategic edge to technology implementation, ensuring that the solutions I develop not only meet immediate requirements but also scale seamlessly with your growth. Whether you need a new application built from scratch, an existing system overhauled, or strategic leadership for your tech team, I can provide comprehensive support.

If you’re looking for a tech leader who can handle end-to-end development, steer project direction, and optimise for cost and efficiency, let’s connect!

---

Location: Australia (Flexible with time zones and available for video meetings to suit your schedule).

Technologies:

- Backend: Laravel (Livewire, Filament), NestJS.

- Frontend: Vue, React.

- Fullstack Development: From database schema design to dynamic user interfaces.

- DevOps: Proficient in setting up and managing cloud environments (Ansible, Terraform).

- Leadership: Have built and managed teams up to 10 engineers.

Résumé/Portfolio:

- https://coreymcmahon.com/resume

- https://coreymcmahon.com/projects

Languages: English

Contact Email: corey (at) slashnode.com
Just downloaded the latest dev build after mainly using link-stage and have to say they did a great job. Either way more free CAD software is great and am glad nee things are happening around this as a hobbyist
ok but that is not informative. What was magically discovered around 2021 that helped them realize customers were not price sensitive? why did customers become that way?

What I'm trying to say is that greed is the default. sometimes they lose 5% . sometimes they earn 5,10,20% . All of those years they are greedy. It's not 3x greedy one year and -3x greedy another
This reminds me of Weight Agnostic Neural Networks https://weightagnostic.github.io/
Plot twist, you can ask LLMs to provide a bayesian prior on their belief in the truth value (from multiple perspectives, again) then plug that into a variety of algorithms.
For hardware that doesn't require me to break out my TS80P soldering iron and no breadboarding (that is half the fun though, although it becomes a different kind of project)? I mean I could, but then I've got to make a whole harness for the thing and and and. It's worth it to me to not have to do all that. But you're right, $700 is a lot.
Decker

https://beyondloom.com/decker/
Launch of SoftEstimator.AI

I work at a well-established technology company, actually a century old. During my day at the project, I noticed that there is currently a recurring need in the software development and consultancy industry that is not standardized by many companies. I'm talking about the cycle of generating estimates, both the process of estimating hours as in a software factory process, and justifying based on the User Story that will be developed.

This gave me the idea of standardizing this process, generating a kind of standardized development hours calculator. Furthermore, the following question came to mind: how AI could help in this process. This is how SoftEstimator.AI came about, and I'm launching it today.

Manage the E2E Estimation Cycle of your software development
Have detailed, grounded estimates, automatically calculated, with scale and standardization.

Generate estimations based on artificial intelligence: Have each item in your User Story estimated automatically and customizably, based on the technology you use for development by AI.

Standardize your estimations
Create groupings of estimations by projects/squads. Add items to estimations, performing dynamic calculations of estimated hours. Based on that data, generate a standardized PDF document, with useful information from the estimated User Story and the visual identity of your company. Have a pre-registered list of the main components used and tasks to be considered in an estimate, controlling the uniformity, assertiveness and creating a catalog of hours by type of development.

Justify the hours with greater detail and assertiveness supported by AI
Create more grounded, technically detailed and assertive justifications. Do all this quickly based on drafts generated by artificial intelligence. Get technical and functional insights chating with AI about the details of the User Story provided.

Get data-driven insights with dynamic reports and detail-analysis
Have operational and financial reports on hand that will make it easier to control the flow of estimations. Check reasons for discrepancies between estimated x realized hours, realtime revenue predictability based on man-hours, average estimate cycle time and much more...

Version, control component approval, upload files, AI Fine-Tune...
Create versions of your estimation with just one click, creating a reliable processing history, record the approval of estimated hours for pre-registered components and tasks including an acceptance file, concentrate file uploads linked to the estimate, make AI-generated estimations even more specific with AI Fine-Tune
Your exams are way more important and good luck!
I still prefer MacOS to GNOME. But KDE always just feels like a mess. And everyone's defence is that you can tidy it up any way you like?

There is value in that. GNOME and MacOS can sometimes feel like straight jackets. But you know, I would rather just not fiddle with the DE and actually get down to doing whatever it is I do. And KDE just doesn't give me that with the default experience.

GNOME works great 90% of the time as my DE. That's more than the 20% KDE has got for me.
Who's afraid of East Asian management culture?
My first reaction is that it's not a bug, it's a side-effect of them being forced by the US government to break VPNs in certain scenarios.
I'll try to be constructive here. We're looking at a single data point and saying "greed".

There are many motions across the fast food industry. it's likely customers are trading down from high status (now unaffordable) restaurants into mcdonalds, and now mcDs can charge those customers a bit more.

this has much more explanatory power and is more plausible than "greedy" . It's also verifiable.

"greedy" can't be observed , or verified. it's not empirical.
I don't think you're doing your cause any good, and in fact some harm.
Discussion [0] (46 points, 2 days ago, 45 comments)

[0]: https://news.ycombinator.com/item?id=40205563
1. Decker is the closest modern equivalent https://beyondloom.com/decker/

2. Bubble is easy for non-coders. https://bubble.io/

3. Gambas BASIC is a bit more technical, but will give you hard 90's vibes (Linux only) https://gambas.sourceforge.net/en/main.html

I think the advent of LLMs might make these types of tools more accessible to non-coders, or at least I hope so.
It takes a few clicks to get to the supplemental data movie:

https://rs.figshare.com/articles/media/a_participant_running...

You'd probably want to switch directions often!
Open-Source Alternative to Airtable
My favorites by Aira:

- "Episode in the life of a landscape painter" - mentioned in the article

- "How I became a nun" - an introverted six year old claims to be a boy and a girl, mixes up reality and fantasy, and tastes ice cream

- "The little buddhist monk" - a pint-sized korean monk plays tour guide to some french tourists

- "Birthday" - something between autofiction and memoir, written on Aira's 50th birthday
I agree with you, but there are those that take an extreme stance on privacy and I'm willing to oblige.
How the heck did you reach the conclusion that the current state of FSD is safer than a human driver. The Tesla Community FSD tracker has it at 157 city miles per disengagement at the moment. The people collecting this data are the Tesla enthusiasts as well.

It has a very long way to go before it is better than a human. We won’t know the true stats until it is allowed to operate without supervision.

Source: https://www.teslafsdtracker.com/Main
Hard work is nothing without a bit of luck
It’s the same principle just scaled up. What are we talking about here? This is not some ground breaking tech. It just got a Tesla PR spin.

https://youtu.be/hpgK51w6uhk?si=LfornxzEdBwvJytY
What I would like to one day understand is why Russia is so good at disinformation. The amount of literal talking points that I hear smart but uninformed people repeat is frustrating.
it's been a while since I did the full pci compliance rigamarole, but I don't recall it being that difficult. you basically just answer a bunch of questions correctly about how you are transmitting and storing the data using sufficient encryption and then they run some automated pen tests on your site and then you are done.
Agreed it is basically scraping which is flaky as hell
Some of the older still-available services are listed below

SSH:
ascii.theater was mentioned here, so was mapscii.me
There's a bunch of games at https://overthewire.org/wargames/ (and there's likely still dozens of other small muds running over telnet as well)
chat.shazow.net is a chat server

Non-ssh (the games mostly require registration):
`curl wttr.in` for weather
`finger help@graph.no` for weather
`cat | nc termbin.com 9999` for a pastebin
`telnet telehack.com`
`telnet freechess.org`
`telnet gt.gamingmuseum.com`
`telnet fibs.com 4321` to pay backgammon

There's used to be Nyan cat through telnet, which I'd hacked into running on ssh but AFAICT there's no longer any servers around (my own server is no longer around either) https://nyancat.dakko.us

Unknown how many of these are running still: https://info.cern.ch/hypertext/DataSources/Yanoff.html
There's a much more recent list that includes ssh and telnet services here: https://github.com/chubin/awesome-console-services

---

On a related note, http://shells.red-pill.eu/ lists a bunch of free shell services.

See also: https://github.com/Swordfish90/cool-retro-term
The breakdown of which governing entity gets which taxes varies greatly among the 50 states. Even individual taxes can get split up amongst various governments, such as a portion of sales tax going to state, a portion going to county, and a portion going to city.
I think we probably agree mostly. I’m also talking about design. I prefer a less constrained design system for a city, I think it gives life. Trying to control every bit of the look of a place makes it boring and conservative, IMO. In the USA, I also think that design unity is used to get rid of undesirable persons, and keep things a certain way for certain types of people.
I’m not sure it’s even at that stage yet. It’s more like very early proof of concept than limited demand consumer ready product.
Cdn.jsdelivr.net unreachable due to expired certificate
> At least not without using a very clever (AI could possibly do it) rasterizer.

Or something like the hinting bytecode in certain TrueType fonts?

https://en.wikipedia.org/wiki/Truetype#Hinting_language