skysight-inc/HackerNews huggingface dataset:
It's a good article. I'd like to add two other things you should consider when handling credit cards.

The first is 3DSecure (or VbV). They are the most secure ways to accept credit cards, though they aren't as easy for users to use. However, they do go a long way to protecting the merchant. If your handling b2b transactions that are high risk, you might consider enforcing this. Again, it's not a solution to wield lightly, but it is a solution.

Also, you can require out-of-band authentication. Generally, this is in the way of making a telephone call, and requiring the user to input a 4-digit pin. This, combined with everything else, will help hinder potential fraud. More importantly, it helps to protect against friendly fraud.

Of the two, telephone authentication is easiest to implement, but do not discount 3DS for higher priced purchases.
I don't think you need to get them a phone number. I use Google Authenticator app on my iPhone, and didn't give them anything. It just scanned a barcode on a webpage IIRC.
Does this really need to be brought up every single time a submission has a question in the title?
I'm sure someone is probably working on this, but what about a service that generates a one off seed for the second stage of auth, married with either a desktop or smartphone app for generating it for the user. Lose your phone/laptop/PC simply cancel it remotely so it stops generating, same as you would if you lost your bank card.

I'm sure I'm missing something, but I'm not sure what.

EDIT: I'll let the post stand but I need to read more clearly, I thought Google Authenticator was purely for Google services.
Introducing CSS Blending
I'm getting 16 character app specific passwords having just turned it on on one of my Google Accounts (all lowercase alpha though).
How to import hosts into Opsview via a spreadsheet
This blog article shows you how to import multiple hosts into Opsview using our spreadsheet.
As a half English, half German who's had a fair bit of professional contact with the US, I'd argue the main difference between the US and Germany is short term vs. long term thinking

The US is brilliant at the short term, as characterized by it's sales culture; the mentality of sell first, build second is extremely effective in allowing some forms of innovation, capturing market share fast and eliminating certain forms of waste. This of course was traditionally offset by attracting talent worldwide, such as academics and engineers, to immigrate to the US

By contrast Germans are famous for their engineering. It's much more a build first, sell second approach that's characterized by long term thinking and planning. Socially that's also reflected education where everyone has a chance, irrespective of your parents income - having a well educated populace is a huge asset and that's seen as a long term investment.

All that said, Germany's economy may be less wonderful than it seems. While the US seems to solve any economic issues by "printing money", Germany props themselves up with exports - that a country of just 80 million people is the world's 3rd largest exporter ( http://en.wikipedia.org/wiki/List_of_countries_by_exports ) is kinda... strange and makes we wonder if something doesn't quite add up?

Having worked for a couple of years in Germany, one thing that struck me is taxes came to almost 50% of my salary. Another impression was my generation in Germany - currently in their 30's - wasn't very motivated toward their own careers. That might not entirely be a bad thing - less of a rat race - but it comes across as a generation that doesn't really know what it's purpose is.

So I have a kind of gut feeling that the German focus on exports is done at the cost of "self neglect".
I appreciate the OP's efforts, certainly sharing code is a good thing. And one of the benefits of the sharing is to get a lot of feedback. Criticizing implementation details is important to spot, discuss and hopefully fix potential problems.
Maybe it's just me but I only trust computers I control.

If you don't have root on a box, consider it pwn3d with keyloggers listening to every juicy password you type. Take that as your friend's laptop, a library computer or even your parent's Windows XP box...

Trust no one, Mr. Mulder.

/tinfoilhat
What a wonderful time that was for particle physicists! You could discover new stuff with two detectors small enough to be charged on a balloon. Today you need enormous machinery and several hundreds of people.
When I worked on KLOE (http://www.lnf.infn.it/kloe), I was able to see the entire DAFNE accelerator as it was small enough to be contained in a hangar (http://scienzapertutti.lnf.infn.it/concorso/2005/scuole_ital...); on the other side, the LHC is so big that you have to climb the Jura mountains in order to be able to see at a glance its entire extension (http://www.futura-sciences.com/fileadmin/Fichiers/images/Mat...).
Hmmm... I generated a batch about 2 months ago and another batch last week. In both cases, they were of the form

llll llll llll llll

(l: [a-z])
Online gambling isn't illegal in the US, but financing it has been illegal since the SAFE Port Act[1] passed. Poker sites were still getting around the provision by hiding the source of transactions through payment processors. The recent shutdown of poker sites to US customers was actually a shutdown of these payment processors used to fund US accounts.

1 http://en.wikipedia.org/wiki/SAFE_Port_Act#Internet_gambling...
"Socially that's also reflected education where everyone has a chance, irrespective of you parents income"

Unfortunately exactly the opposite is true.
Whoever said just 15 mins a day for social media marketing is enough is....
Use the app, it's not vulnerable to such an attack.

Or buy a prepaid phone, and don't use the number for anything else.
Well, is that 5-minutes-to-print an edge case or a more than occasional situation? If the latter, how hard is it to create an alternate email account in which you send non-confidential emails/docs on the spur of a moment?

If it's an edge case, it seems like a trivial one for reducing your security so much. As your documented online data grows, the chance of being hacked only grows. And once you've been hacked, there's really no going back if the attacker decides to do a data-dump and now forever holds your information in perpetuity.
I'm glad this is on the front page again. I just set mine up. thx internet.
Jill Rowley of Eloqua Scores Big in Social Selling
I was worried this would be a major pain when I enabled it, but I have to say, it has been much more painless than I thought it would be. Most of the time, I don't even think about it. Most of my consumption of google mail is through clients on my laptops, iPhone, or iPad. So in that sense, it's not much different from a regular password. The difference is that someone else has a much harder time cracking my account. It's actually much less obtrusive than using lastpass (also highly recommended, but not as transparently usable).

That being said, two factor google auth wasn't going to save Matt Honan here. Identity, trust, and authentication on the internet are all built on a foundation of sand. We need a new model.
Yeah, that would be great if the damn wireless printing worked in school. Sometimes you just have to log into a public machine.
Since the article below puts gambling addiction in thesame fold as drug addition:

Title: The neurobiology of pathological gambling and drug addiction: an overview and new findings:
http://www.ncbi.nlm.nih.gov/pmc/articles/PMC2607329/

Is Facebook harming society by this new act of desperation or is Facebook exposing its users to a new habit that could be destructive?
I didn't think Chrome any longer required an ASP?
Already on the market - YubiKey.
We have launched our service a few months back. We have been spending $x,xxx per month. We are getting a lot of free users, but the quality is not as good as users who come to our service through other parts of the web. The cost to acquire users reasonable, but the jury is still out whether it is really cost effective for finding our paying users.
They've been 16 chars for at least several months.
Aren't most of those boards invaded pretty regularly?

Huh? No.
Happy to stand corrected. My apologies all round.

Thanks everyone!
I've been avoiding doing this, and I'm not certain the reason is valid - I don't want Google to have my mobile phone number. Perhaps I'm being overly cautious, but the fact Google already collects such a huge amount of data on me, coupled with the increasing insistent requests to enable two-factor with my mobile phone number, has made me not do it. I got so sick of being pestered about it that I stopped using Gmail a little while ago.
The state of IPv6 adoption
I agree.

My colleague who sits across from me finished uni when Italy was booming and Italy knew all the economic answers. I finished uni when Ireland was booming and Ireland knew all the economic answers.

Germany is booming, but most people don't know why. Ten years ago it was absolutely the sick man of Europe, and now here in Germany they the economic answers? Erm, ja, bestimmt.
Removing ransomware when your computer does not boot
I would go one step farther and say it is poorly written. It is rambling, disorganized, and lacks both both narrative structure and thematic clarity. It offers no systematic analysis, and confounds anecdotal evidence with personal rembrances. It reads like a the runner-up entry in a write like Thomas Friedman competition (which is not a good thing.)
You couldn't use a USB key instead?
I'm not objective here at all, and people are entitled to disagree, but, yes, gambling to me is 'unwholesome'.
Still did as of a month or two ago when I turned on two-factor.
I'd say it's warranted in this situation.
Yeah, yeah, I should probably turn it on. And while I'm at it, I should probably eat more vegetables, less red meat and go to the gym. But I don't see those happening either ;).

Seriously though, when you have to enter the PIN multiple times a day, it gets annoying.
I'm always dumbfounded when these topics come up and a lot of people start saying how inconvenient it is, that it is all wrong. But these are probably the same people which later accuse Google that they didn't do enough to protect their accounts!

Yes, two factor authentication is a small hassle. Yes, two factor authentication requires a bit to set up. But do you realize how much actually depends on your email account being safe?

For one, how many times did you use Googles OpenID provider? Yes, that's your Gmail account! Or for how many services did you use your Gmail account as the email address? You know that password resets go to that account, right?

Don't do that? Maybe you use Google Calendar, then. So yes, there is actually a lot of sensitive data in there. If you don't believe me, try to get a hold of a friends calendar, and see what you can guess about that person just from the calendar.

Or should someone just post some slander about you on you G+ profile? Or buy some apps from the Android Market? Of course this things never happen to you...

So just take the time to, besides looking at the time or the latest message on your phone, open that stupid app and type that stupid code in! It's not THAT much work!
If you expand outside paypal/ccs into other methods like direct debits (common for Germany) I would be curious to hear similar stories. Accidental chargeback rates are way up on direct debits so any stories for dealing with that efficiently would be very interesting.

Would you mind expanding on this, please? We're looking at different payment possibilities for a start-up and direct debits is one method that we are considering. This is the first time I've heard of a much higher chargeback rate on such transactions, though.
It still does; I had to go through this yesterday. I don't mind Chrome so much per se, but this also means you need an application-specific password for Chrome OS, at least for he initial sign-on, which I find oddly frustrating.
Bases de Cotización: Eliminación de Conceptos NO incluidos
Se eliminan algunos de los conceptos hasta ahora NO incluidos en las bases de Cotización
apples whole business is based on copy and clone, why are we even having this discussion again?
Most of the German economists know and say that Germany is only at the top right now because it has profited so much from the Euro

hmm must be a different Germany you live in ;-)

DER SPIEGEL from july 24th (http://www.spiegel.de/wirtschaft/soziales/euro-krise-oekonom...):
172 renown German economists published a joint appeal to stop the government from implementing the ESM. While in response only 17 renown european economists made their plea in favor of the governments pro-Euro policy.
I smell fear. I am not a Microsoft fan-boy... far from it, but I have been wondering for years if Microsoft is ever going to drop the hammer and get some control on their software distribution by designing hardware with the intention of allowing the software to run as intended.

For many years I watched the bloatware that totally ruined the user experience, especially at the turn of the century.

Can Microsoft make quality hardware to compliment their software and in turn make their software feel "better" to the many of those who have turned away from it? They have the capital to figure it out.

The only "huge negative impact" that I can see from this is pushing the hardware manufacturers to innovate harder and do better with the use and distribution of the software. It is going to thin the herd for sure. I think this is necessary for Microsoft to gain some control over the user experience.

Yes, resellers and hardware manufacturers helped make Microsoft the huge corporation it is today, but the time has come. I think Microsoft only has to gain from this--if they do the hardware right.
I just turned two-factor authentication on and it forced me to set "program specific" passwords for like 10 different apps and seriously messed up my phone. I had to deactivate it. What's with the hassle?
You don't need to enter your phone number to use Google's two factor. You can use their smartphone application to generate codes. If you don't want to do that, the algorithm is free and open-source so you can probably find an alternate implementation that works fine.
"This means it produces many utterly vile posts - but all of them are true expressions of people as they are, not as they pretend to be."

A vast majority of the vile posts are people playing a game/acting out a character/aping (along with) the community. It's willfully not-in-earnest. It's crazy that people think 4chan is 'true expression'.

That's not to say that there's not truth in 4chan, it's just that it's not on the surface, it's 'another layer down'.

For example, take /fit/, the fitness board. It's full of great advice and discussion... as long as you know enough to read past the obvious bad advice that's willfully posted to fuck with people.
Well, within the production end, there's a shift from "tinkering and having fun" to "this is something done by professionals, now shoo, kid". The necessary licensing fee to develop for iOS only reinforces this notion.
You shouldn't have to carry an electronic device, though: a list of codes on paper can work fine. That's how the NemID system works, for example (http://en.wikipedia.org/wiki/NemID): I have a big list of challenge/response codes that I carry in my wallet, and each is used once. I use that one successfully to log into my bank with two-factor authentication, but since I have no cell phone, iPod, iPad, or Android device, I can't use Google's version.

What's weird is that Google even sort of supports the numbers-on-paper approach, but for some reason they limit it to 10 numbers.

edit: Hmm actually thought of a possible solution. Looking into how hard it'd be to port the Google Authenticator to a non-mobile platform so I can run it on my laptop.

edit2: Although it looks like you can't enable the Google Authenticator method without first enabling the SMS method...
The bar code was actually just a code to initialize the code generation (I think it is based on that randomly generated seed and the time, so that then server and client generate the same keys). You could have also typed in the code by hand.
How much "fiddling" do you have to do to get your PIN? Unlock code or symbol, select authenticator app, read PIN? On top of loading Gmail and entering your user/pass?
Doesn't help if they target your provider:

http://slashdot.org/story/12/03/02/0059202/linode-exploit-caused-theft-of-thousands-of-bitcoins
I know, it's irrational, but it adds an extra annoyance factor, far more than it should. I mean, I spend far more every time I take the subway somewhere. Driving across the GW bridge costs $12, and I don't worry myself about that.

It turns into four or five SMS every month, when I usually average zero (various computers, various browsers, etc.) So suddenly, there's this line item where there used to be none. I can't explain quite why it bugs me.

In any case, I hadn't heard of GA before. I've installed it and life is good.
Identifying Bad Merchants and Bad Customers on Online Shopping Portals
The Famigo Tech Stack
Why are you the only person in the world who doesn't have a cell phone? Why would you assume that super-large companies would consider your single-person use-case?
Learn That New Programming Language The Startup Way
Why are people discussing this for so long?

Because it's fascinating.

Its not the same old bullshit minutiae over-hyped as the latest and greatest thing, it's honestly a feat of human achievement. It means different things to different people. Creating inspiration, awe, and wonder. It shapes opinions on humanity, tech and life.

But forget all that for a second, and the intimate technical details of how things come together are still interesting to techy people. Even the logistics and implementation of traffic lights can tickle our curiosity. This thing is on another planet!

You sound like someone who has never built anything for just for fun.
XBMC and Ouya? Oh yeah
The Enterprise Minimum Viable Product: Focus on Viable Instead of Minimum
Jodrell Bank Observatory founder Sir Bernard Lovell dies
did it today :)
XBMC and TuneIn on the Ouya
HTTP Pipelining – Not So Fast…(Nor Slow)
Glass half empty
"Epic Hacking"?

A whole lot of damage was done, yes - but a "epic hack"? Don't think so.

epic: heroic; majestic; impressively great
Bingo Facebook Gambles On Games Using Real Money, Not Credits, To Engage Users
Google does do ajax crawling but it requires a bit of work on your part. You need to have server-rendered equivalents for all the URLs of the site you want indexed. Google will GET these adding an '_escaped_fragment_' key so you can identify the request and serve a static page instead.

As for Bing, DDG, etc I have no idea.
The Most Important Part Of A Product Integration Deal
Does that includes UI design?

If I had to hire someone to build my MVP I would rather focus on design than creating a killer app on the first version.

This is why.
Since the service is not popular, doesnt have many users or features, I would try to convert users by offering them a great user experience.

Thats why I would invest 3k on a great UI/UX design and the rest on building the app.
I'm currently trying to get one as a graduate. Only applied to about 2-3 places, so nothing representative yet.
7 Tips for Start-Ups
Reducing Phishing Up Times
Same here, I just enabled it a few days back and it's much easier than I imagined it would be.
Oh yes, I have seen where re-writes are actually done. Developers start to talk about the lack of "scalability" and "maintainability" of the application with the best solution being to rewrite the app. I've also seen Java-to-Microsoft stack ports being bandied about. Generally it is a really bad idea but some of the decision depends on the language(s) preferred by the firm inheriting the app and the size of the app.
really surprised so many people that post here refuse to use google authenticator because its "annoying." is it a hassle? yes, but if you have ever had your email (and other accounts) compromised you understand why it is worth that small 5 second hassle when you login.

one feature that i cannot understand why it hasnt been implemented though is protecting the app itself with a password or pin. some people say to just protect your whole phone, but i dont really want to do that because to me that _is_ too large a hassle. if i lose my phone i can revoke access to my email and other similar apps, but not if the person that finds it opens up google authenticator (which shows the account the id is used for) and logs in to change the password before i have a chance to. even just allowing for it to display an account nickname instead of full login would be a huge step forward
Definitely let us know if you think of their name or dig up their blog post. Sounds interesting.
It's not like this is the first time MS have done the hardware/software combo (which has been pretty successful for them)... xbox anyone?
Apologies, i should have checked http://www.opendns.com/support/cache/ - was a local rule for tumblr.
Taxes in the US aren't as low as some are inclined to believe (or as high as others--).

As a programmer renting in NYC with a big salary and no investment income, Federal, State, and NYC taxes come to about 44%-46% of my income -- maybe 42%-44% since I tend to get a refund. Once you add in health care costs (both employee and employer contributions), it's probably pretty darn close to 50%.
Top Performance Mistakes when moving from Test to Production
But I would never dare write mars landing code in C directly.

Why not? I used to write code for airborne radars directly in C, so I may have a different perspective.
The surprising, stealth rebirth of the American arcade
Perhaps the story of the Soviets trying to kill him can now be told: http://www.telegraph.co.uk/science/space/5362829/Sir-Bernard...
Most posts have been citations of authorities, or anecdotes WRT to perks and stories.

Could I break the trend and make a simple request instead?

"Make it a gift not a reactive response to bad news".

I've never worked startups or dotcoms so all the perks I've experienced have been in response to low scores on morale surveys and similar situations. Frankly if morale is low due to terminal mismangement the only thing that makes morale worse is "pop corn machine" or "mandatory PR kickoff meeting after hours" or "offsite meeting" or "casino night" or "barbecue lunch day" or "pizza day". Please find out why it sucks and fix it, don't just simply buy a popcorn maker machine and call it good.

"Oh, so the problem is the boss couldn't lead starving wolves to raw meat but he can't be disciplined because he's on his boss's golf team, well I know lets have casual dress monday just this one time, I'm sure that'll make everyone happy and productive"

It gets to the point where if you hear about a team doing a "perk" thing you automatically start wondering how they screwed up or whats wrong.

"That dept is having free pizza day at lunch today" "Oh no, that's terrible, I thought they were doing OK, whats wrong?"
Acer should be scared. I've already sworn them off after every Acer PC myself or a friend has owned in the past six years has failed in one way or another long before it should have. Anyone that knows how to make quality hardware has much less to worry about.
Sigh, OK. I'm turning it on today. Was going to do it right now, but then I realized that I'm at Starbucks right now... probably not the best time to be messing with passwords.
Lastpass for one supports Google Authenticator. I am not sure about any other services.
Interesting article, which summarizes nicely how German conservatives like to view the country. So I think it is more interesting as a report how our current ruling (center right) coalition views Germany than as being grounded in reality.
The Heroes of Java: Çağatay Çivici
Good call RE the tooltip.

Just for reference, everything's at 95% confidence. We do mention that in the Advanced output but it's perhaps a bit too hidden.
Fab.com in Europe
Want to Do Mobile Payments? Here's a Free Tablet
Some Criticize Jails as They Move to Video Visits