skysight-inc/HackerNews huggingface dataset:
I'm pretty sure the prevalence if guns in almost all forms of pop culture skewed at males is really good market evidence that the majority of them do indeed like guns. (What's the last action movie, video game or toy store you saw that didn't have a gun, or some representation of a gun, in some form?)
He assumes your current expenses are at steady state. It's a pretty obvious assumption. If you pay off your home, your expenses in debt servicing will be lower when you retire.
As you probably know, discussions about Social Security in the U.S. quickly become holy wars so I'll just answer your question without explanation: I trust the Democrats will protect and defend Social Security from the Republicans who want to destroy it.
> You make an excellent point regarding IP, and in fact BG's letter likely set the foundation for the entire software industry as we know today.

Indeed, the BSA was aggressively going after copyright infringement a decade before the RIAA ever thought to get in on the action. Our modern copyright enforcement regime, where the authorities go after infringers like they're hardened criminals, doesn't have its roots in RIAA lobbying, but rather the BSA's response to large-scale pirating of Windows, Photoshop, etc. Microsoft did and still does have what amounts to private police that bust into warehouses with copied Windows CD's, etc.

If you want to know why the DOJ considers copying a few million copyrighted documents to be a crime worthy of jail time and enforcement as if you're mixed up with organized crime, you have to look no further than the tech industry itself.
+1 to this. I am on Rdio now for $10/mo, and I easily would have paid Lala the same monthly fee for their service.

I assume they were in bad shape because they had to pay every time someone streamed a song, and not enough of their users wound up paying them for streaming access. Too many loss leaders.
At this point, the DOJ should apologize, investigate internally and fire those who were involved in Aaron's case.

If they refuse and insist that this is business as usual for them then it should be legislated by the government that all previous cases involving heavy handed plea bargaining under the current DOJ staff should be re-opened and re-negotiated under saner conditions.

This is clearly not justice.

Aaron Swartz himself wrote about this kind of situation:
http://www.aaronsw.com/weblog/semmelweis
I don't think I've ever seen a demo card that doesn't accept any valid string for expiration/name/CVC.
I wonder if English have ever felt similar offense when people point out the role of France and the french language in their country's and language's development.
Please email me. (talithamichele at gmail dot com) It has been a long time since I read real estate books. I need to figure out how to buy a house cheap. I know it can be done but I don't know where to get the info I need.
Alternatively, if you're being a jerk to service staff, you deserve bad service.
NASA International Space Station Longeron Marathon Challenge
I think this is an important article for the HN crowd. Educated STEM people usually have a strong devotion to science, but science very often fails at revealing the truth (dangerously, in a misleading manner). The article points out the problem isn't malice or incompetence, it's bad expectations.

To me, a critical analysis of research is often more valuable than the research itself.
> Commenting out bits of code to see what effects it has is one of the most useful ways of not only debugging a program, but learning to program, and “reading” code.

I was thinking about a command line tool to enable this automatically by generating code based on the source files.
Wow looks nice. Is an SSL certificate still required since the JS is on Stripe's secure server?
Well, no. Now we know what we don't know, rather than assuming we do know something. And when we specify one font over another we can say honestly "Because I like it" rather than dishonestly "Because science tells us it's best".
Actually, the Shire had a mayor & sheriffs.
Agreed and not to mention that most people won't use anything close to the 50GB, combine that with the deduplication plans they have and you have a very different scenario.
Could you deliberately deceive the user then? Put say, amount=500 and actually charge $20?
Just confirming, this is the same solution that was earlier published as Stripe Button right?
Fascinating story.

Fast Company did a piece on Bill Nguyen about 18 months ago: (http://www.fastcompany.com/1784823/bill-nguyen-boy-bubble) and included an infographic on his track record:

http://infographics.fastcompany.com/magazine/160/bill-nguyen...

For a bunch of companies that have widely been considered failures in terms of product and number of users, he has had some unbelievable exits and financial successes.
Recurring payment friendly?
Sorry but I've become a bit of a personal finance nerd recently. :) Here is the story on withdrawal rates:

The 4% number comes from a study that discovered that a portfolio with a constant 4% rate would survive any period in US stock market history -- even the Great Depression. But past performance doesn't guarantee the future performance. Try to do this with European markets and there are periods where a nest egg won't survive a 0% withdrawal rate. But yeah 4% is the guess people use when planning retirement.

Thats fine, but in real life you have to be flexible as you approach retirement and keep an eye on the math. The first 10 years of retirement are the critical ones. After that you hopefully built up a buffer and don't have to worry due to the nature of compound interest.

More info:

http://blog.networthify.com/withdrawal-rates/
http://www.mrmoneymustache.com/2012/05/29/how-much-do-i-need-for-retirement/
http://financialmentor.com/free-articles/retirement-planning/how-much-to-retire/are-safe-withdrawal-rates-really-safe
http://firecalc.com/
"Jiro Dreams of Sushi" is available for free to Amazon Prime members.
OpenForum's list of "best (recent) books for entrepreneurs"
One of the bread & butter services @ ConversionVoodoo.com is fixing broken UI's around checkout / carts.

I have yet to meet a retailer that we can't hit at least 15 - 25% improvement in sales by testing and fixing their checkout.

Take those gains and multiply that times the entire internet and Stripe has the opportunity to make a major impact on the GDP (I'm only half kidding).

A few years back I shared one of our "low hanging fruit" cart optimization strategies that almost always works:

http://www.conversionvoodoo.com/blog/2010/07/proper-placemen...

Despite being nearly 3-year old advice, moving security / trust symbols into the visual field of sensitive information remains an easy conversion gain that we see STILL work nearly every time to the order of 5 - 10% gains.

But the current reality is that even being able to test your checkout process on most of the leading "off the shelf" ecommerce platforms is an incredible pain in the ass (I'm looking at you Magento, Oracle ATG, etc)

If Stripe executes on this idea - scaled cart testing - every dollar that an organization pays for Stripe fees is easily cancelled out by a properly optimized checkout form. This is huge.
This is cool but Im confused about the workflow

On a signup form:

1. Enter email

2. Enter password

3. Click the Stripe checkout button, div popup, fill in and click pay, popup goes away, Token created and added to the form

4. User clicks submit on the original form

Is that right?
Sure -- but you can always deceive the user.
This reminds me of how everyone was mad at Rumsfeld and how he shouldered most of the blame for the Iraq war, leaving Bush largely unscathed.

Carmen Ortiz was doing her job, the real problem is higher up.
Paymill and Braintree are available, though. Try one of them.
'We Just Want To Visit Websites And Look At Them,' Users Say
> The thing is, though, that Go has gotten lots of para-language stuff right.

If one studies the history of programming languages, one comes to realize that this has as much or more to do with the success of a language than the language itself.
I agree, the last paragraph is great. My issue is with the last word. A better ending might've been something along the lines of "Paying twice cost less than paying once," and left out characterizing this fortuitous win as a "genius" strategy.
When did Google Drive start offering 50GB of storage for free?
I'm just regular-successful, but my resume does not contain any embellishment. If anything, it undersells me.
That seems a tad melodramatic..
Yep. No TV, No cell phone, a 25 year old car and I've never been happier.

I'm a Software Engineer, and I save towards 70% of my paycheck. I still bought a new laptop, DSLR, rifle and other toys all in the last 6 months. I don't earn tons for a SE, if that's what you're thinking.

It lets me do things like Drive from Alaska to Argentina for two years, simply because I wanted to[1]

[1] theroadchoseme.com
What a profound moral sense and courage. We need more people in the world like Lessig.
I wasn't able to find any documentation about using the button for recurring/subscription billing. I hope that's a feature coming soon.
I can answer your question for you. Or rather, pg already has:

http://www.paulgraham.com/say.html

You can see by the vitriol in the responses that I've hit a nerve - people know what I'm saying to be true, they just hate that it is so, and they hate me for pointing out that it is so, and being unapologetic about it at that.

Such is life. I'm less concerned about what names people call me than who is doing the name calling. Random people on the internet obviously don't know me well enough to matter, really.
Reading this title made me think of the opening scene to the new Ocean's Eleven, when Danny is at his parole hearing:

"Well, as you say, ma'am, I was never charged."
Nobody draws voxels, graphics cards aren't good at them. I don't know about these engines in particular, but in minecraft everything is converted to polygon meshes.
I tried with all ones (after the card #) and it would not accept the expiry date. I admit, I might be part of the problem. ;)
How to build a Safari Extension using the command line
Many users want to collect names, and it can be helpful for fraud purposes. We're still evolving and testing, though. We might not keep it forever.
Does it do address verification?
What (in your opinion) might he eventually regret? Honestly curious.
Video games take off as a spectator sport
Dyed hair is only a lie if you claim that it's not.
The idea is clicking submit on the host form would trigger the Checkout. Then, after you enter your payment details, the whole thing submits.
Google looks to kill the password using the ring on your finger
When was the last time you were here? What startups did you meet with? Im not comparing Chattanooga to the valley by any means. I compared it to Austin, which is also very different then the valley.

This definitely isnt a place for everyone, but if you love the outdoors, a low cost of living, super fast internet, and other startups with similar interests, Chattanooga is an ideal place.
I guess my real question is - is there another page where it securely says the actual amount? (Does that make any sense?)
The time has come to ditch YAML for configuring Ruby
Yep; see the "address" configuration option at https://stripe.com/docs/checkout
This might be helpful: http://www.ubuntu.com/certification/desktop/
You literally can't become fabulously wealthy and keep it long-term by cheating people.

L. Ron Hubbard?
> A log-structured engine that avoids overwrites to turn updates into sequential i/o is essential both on hard disks (HDD) and solid-state disks (SSD). On HDD, because the seek penalty is so high; on SSD, to avoid write amplification and disk failure. This is why you see mongodb performance go through the floor as the dataset size exceeds RAM.

The structure of MongoDB's on-disk data has nothing to do with why its performance starts to falter when the dataset size exceeds RAM. It falters because each node mmap(2)s its dataset into MongoDB's process space and relies solely on the kernel's buffer caching algorithm to determine which pages to cache. The buffer cache is general-purpose, shared with every other process running on the node, and isn't finely tuned (or tuneable, for that matter) for database workloads, in which a basic LRU would be too naive. This is why MySQL, for example, doesn't mmap its tablespaces - instead, it's typically configured to manage its own buffer pool, and to avoid double buffering, O_DIRECT semantics are used for disk I/O.
I'm hesitant to add this to https://www.bngal.com because it seems like there could be usability issues if you need to capture other information on a single checkout form (email address, shipping address, shipping method, etc.).

It seems like a customer would do the following:

- Fill out all data except billing info

- Click the "Pay with Card" button

- Overlay comes up, they enter billing info, then click "Pay $X"

- Overlay closes, token is passed back to form, form is automatically submitted via JS

The proof is in testing and data of course, but my gut tells me people prefer just a single form and button. That's why I like the original checkout method.

The mobile part is great BTW.
That number was based on the prevalence of reasonable apartments in my city that rent for $450/mo or less. With a roommate that's $225/mo or $2700/yr. That leaves $191/mo for food and toothpaste and the like, which is doable for one person. (Clothes are essentially free if you don't care what you look like.)

The example was meant to be extreme and you can adjust the dials a bit without missing my point, which is that of course it's easy to retire if you remove the requirement that you might want to buy stuff.
It's a race to see what happens first: it runs out of money or has its assets seized by the government agencies that went after Kim Dotcom's last, similar business. The whole exercise is basically a massive middle finger directed at them.

That's the other monetisation problem: people are not going to want to store anything on Mega's servers if they're relying on stable long term access to it, which means they're not likely to pay. Good free storage for your movie downloads though.
I once got into trouble with one of these unwanted newsletters. A design agency in Argentina was doing the mass mailing their work to design blog authors in an effort to spread the word about the work they had done. It was a fairly large agency with big clients, one of those clients was Unilever.

I started by requesting to be removed from the list, this went well for a couple of weeks, but then (some intern, I suppose) would pick it up again and put it in their database. I got tired of this game and marked it as spam, but somehow it was still going through my inbox. By the fourth time this happened, I grew angry, so I thought about a way to get the message through that their emailing tactics weren't welcome.

I searched through LinkedIn for the highest level of Unilever I could find, and I struck gold: I got the email of the VP of Marketing of Unilever for Argentina. I wrote him an email, with cc to the owner of the Argentinian agency. I wrote to him as if he was a friend, something along the lines of...

Dear *****
Your design agency in Argentina, *****, has been spamming
me about the work that they have done for Unilever. I
wouldn't like to have my brand associated with such seedy
marketing tactics. If I were you, I would drop them as a
provider. Please take care good friend.

The owner went bonkers, I just replied that he should search through their email to see how many times I had asked to be removed from their list. I guess they finally implemented a blacklist because I didn't receive another email from them.
Yes, absolutely 100% yes an SSL certificate is still required. Look up mixed content warnings and why they're a bad thing.
All times were from Google Maps and BART schedules. Google Maps currently lists Daly City to Moscone as 14 minutes nominal, 17 minutes with traffic.

The "as long as I don't drive when most people want to drive" thing is nice if that works for you, but it's definitely not the common case. Most people have to commute when most people have to commute.
> If you find this business to be repugnant, who do we blame?

People that use it.
Yeah, you can definitely use this with recurring payments. Once you attach the token created by the Checkout to a customer, you can bill the customer whenever you like. (There's more at https://stripe.com/docs/checkout)
I think one way to 'Stop Bullying' is to help people understand when they are bullying, instead of just imagining it's something someone else does.

It's just about power, the abuse of power and what you would have respect for. That "helping" sounds ridiculous if it won't come from something/someone that THE BULLY would have respect for (such as police as in the story).
Use a password manager. Random, unique passwords for every site, and one long master passphrase that is stretched by the password manager.

With random, unique passwords, resource-intensive server-side hashing provides no benefit. We are doing that because people re-use their passwords everywhere.
I'm confused, so say I put this button/form on my site.

How does my app tell the button the final price?

How does the button send the token to my app?

What does the user see after they pay? Does the button display its own receipt or do I build that?
This just speaks so highly of the state of our society. Even if you're at fault taking the moral high ground, owning up and apologizing means you could have the rest of your life ruined.

If she doesn't feel bad about causing the death of Aaron Swarz, she should not apologize. If she feels bad enough that she needs to apologize, I doubt she would worry about being ruined financially ("man, I basically killed this man with my irresponsible actions, how can I live with that?").
Awesome! I'm ready to use this.
No mention of the Color in the article, I guess but that was a great story.
Yes. Otherwise an attacker could serve a page that looks just like your page, but has different javascript that ships them the credit card numbers.

If you're not using SSL, you should just assume that an attacker can break your page in every conceivable way.
Can anyone point me to a tutorial showing me how to integrate stripe with Django?

I think it would be clearer if I saw some examples.
Ah! got it, thanks
While it's much more consistent than JavaScript, I find Dart to be a pretty bad language. It's sad that it doesn't learn from the failures of Java and JavaScript.

Hopefully the VM will be easy to target from other languages.
That still makes it a cure for AIDS.
"passwords dont work"

then...

"we'd use the token, but for important operations, a password would be asked"

people just don't understand what they write ;)
If most things in design haven't been proved conclusively, that would just mean that design as a field doesn't take research seriously and doesn't insist on a strong empirical basis.

You don't need to wait for unspecified advances in neuroimaging. The basic research can be done 50 years ago. You measure the mind with behavior, end of story. That part is as easy as A/B testing. Just do it. If you go to neuroimaging, you should first know why it is relevant and worth spending the $$$.

And your feeling that the factors you suppose to be important are too many shouldn't ever stop us from looking into it. When we really get down to brass tacks on a subject, it's common to find that a lot of the factors we suppose to be important contribute negligibly to the final outcome. You just don't know which these are until you look.
Sure. It's been a long journey that I started about four or five years ago. I honestly haven't been reading that much. I guess if anything, Neil Strauss's "The Game" was probably the only significant piece of writing that set me off and piqued my curiosity for social games and mechanisms. I've also read some of the darker pickup blogs (http://heartiste.wordpress.com/) which are not recommended if you want to retain your faith in humanity. They do provide some insights in some social games, though, including status whoring and related things. Don't take it too seriously, but there are probably some insights to learn there. It seems to me that the best people to hang out with are the ones that are impervious to stuff like this. None of my best friends (well, maybe with one exception) would fall for the kind of manipulation that Heartiste describes. Some subreddits (/r/sex, /r/relationship_advice) have been valuable for hearing horror stories of people not standing up for themselves in a relationship setting, and why it's important to have principles. You'll hear these in real life as well.

The most significant thing I've been doing has really been to get out in the world and meet as many people as possible, along the way seeing these social games first-hand. This has involved living in a different country for a year and going to almost every party or social event that presented itself. Initially it was to overcome depression/social anxiety, meet girls and make new friends, but after a few years it's turned into more of an interest in people and getting new experiences. After a while you have been in so many social situations that you stop worrying about what image you present, and see more of the personalities, motivations and insecurities behind most people's facades.

I don't know how old you are (I'm 26 now) but I'd guess some form of social travelling (backpacking, maybe studying abroad) and saying yes to as many invitations as possible would be a good starting point. Also actively trying to become a better person - more fit, more friendly, less able to get manipulated or taken advantage of, more knowledgable, more secure. There's probably some confirmation bias on my end here, there are probably multiple was to get these experiences. I _do_ recommend "The Game" since it's a very fascinating account. Hope that helps.
Found it, for those who are interested - http://tsastatus.net
I take your point, but all three of your examples currently have severe physical limitations. It is not just a matter of execution. Untested, inadequate, and low range.
I've coded in C since 1993, shipped commercial systems C code from 1996 through ~2004 (with an 3-year C++ interlude in there), and continued to write C code on projects from then today. In that time, the number of bugs I've dealt with due to the lack of type safety on a void* is: zero.

Lest you think I'm being cavalier about this, I've been writing professional Ruby since ~2006, and have since then been routinely aggravated by bugs that would have been mitigated by type safety. I buy type safety. But it's a continuum of value, not a core principle of development.

In idiomatic C code, void* is a way of dropping in and out of static typing, usually to pass values of arbitrary types to a generic container library or through a callback. The use of void* doesn't surrender type safety throughout the program. Idiomatic C code casts a specific type to void* at the call site of the function that handles generic types, and casts it back to that specific type the moment that library hands it back.

Of the arguments C++ devotees marshall against C, I find this one among the fudliest.
She's a political appointee who chose to pursue a full-court press on something that should never have been a federal case, in the first place.

She's now politically damaged, and a liability to the Obama administration that appointed her. She should resign.
You mean the two videos embedded in TFA?
What do you recommend if I need to support users without Javascript? (I'm guessing this button isn't for me?)
Good idea but I hate the box rising from the bottom.
Subscribing a customer to an e-mail newsletter that they didn't ask for is being a jerk to your customers. You might get a few extra sales, but for every sale you get you'll also get a bunch of customers who think you're an annoying spammer and will want nothing more to do with you.
they say, all files will be client-side encrypted which won't allow them to "deduplicate" anything.