skysight-inc/HackerNews huggingface dataset:
Not for public repos. Scroll on down to the "hosting provider" section of some research I did on forges to get a better idea (http://redmonk.com/dberkholz/2013/04/22/the-size-of-open-sou...).
I think what will eventually happen is people will "get over" VR. Might take a long time, and a large portion might still spend most of their lives in VR, but I think solving real world problems will become attractive enough in its own right that a lot of people will forego the VR wonderland for the opportunity.
Oh, ok. I guess i misinterpreted it as being closed. Anyways, i am also not a student at any school. In fact, i have no formal graduation whatsoever. So my question remains, are there more competition or games like those they have at MIT?
Thinking about it, Facebook has a few things going for it. It's become an important communication channel outside of immediate family and Best friends. Collecting email addresses across multiple web mail accounts, that's a chore. Facebook has made messaging people easy. That convenience has got staying power, especially as in regards to mobile communication.

Teens aren't interested in Facebook anymore? Doesn't matter, they have no money to spend.

The sweet spot is advertising to older people with jobs.

The balance they need to find is the amount of directed advertising they can force on a user, without making them abandon FB... or just use it strictly as a messaging tool.

Scare off users from reading/liking/posting items in their feed, lose the other revenue stream: mining and selling social trend data.
[Stripe Developer] [edited for clarification]

I appreciate your interest in the security of Stripe, I think we definitely share the same goals here (making everything as secure as possible). However, I think there's some misunderstanding in some posts (and in the blog post):

> [...] the Stripe.js code is instantiated within the user browser by an HTTP response from the server infrastructure owned by the merchant
When Stripe.js is included within the user's browser by a (mandated https, not http) request, it comes directly from Stripe's servers, not from "the server infrastructure owned by the merchant."

Stripe.js isn't served from the merchant. It comes directly from Stripe. Stripe.js helps keep payment card data away from a merchants own servers.

Keeping card data away from someone's machines doesn't mean that they don't need to comply with the Payment Card Industry Data Security Standards, but it does make things quite a bit simpler.

In most cases it means that they're eligible for one of the light-weight self-assessment questionnaires.

PCI compliance, of course, shouldn't be where people stop thinking about security though. You're absolutely right that if the pointer on the merchant's site is changed to a malicious site, that's where the payment data will go. The merchant needs to keep that pointer safe in the same way that if you're redirecting to a hosted payment form or elsewhere, you need to make sure that isn't tampered with either. (A hosted form has the advantage that at least a customer can view the SSL cert but if they don't recognize the domain (or if the domain is obscure anyway), that's not much good.)

Being compliant with the PCI standards is important but it doesn't cover all of the very, very important points of web security.

We do take security very seriously, and if you happen to find a valid security issue with our service, we pay bounties[1] for properly disclosed vulnerabilities.

If you have any other questions, or would like to wax poetic about security or PCI please don't hesitate to send the security team an email at security@stripe.com or to email me personally at alex@stripe.com.

[1] https://stripe.com/help/security#rewards
After quick look it seems that this is only poor randomizer. Good generator generates data which isn't too random and internal correlations and ranges are right.

I used to maintain one over 15 years ago.

At least City Street address post number and telephone had to be internally linked. Those are things that can be easily and automatically checked. So those constraints need to be checked also when generating data. It's also silly to give flat address on area where there aren't any flats etc. 30th floor on country side? Oh yeah. Distance based address downtown. As silly.
I'm also with TPG and can't fathom having a cap, much less the typically tiny ones offered. Recently I noticed that Optus is now offering an unlimited account for a reasonable price. I've heard anecdotally from people working there that it would be cheaper for Optus to do away with the caps because of the internal overhead that tracking and accounting requires.
<<harsh criticism - i feel bad for, yet I also feel the standards are too low in general>>

pre-rendering the board on the server would have solved his perceived problem immediately.

then in more detail:

layout thrashing only now a consideration? (advice use a mock dom and see what your operations do in your testing if you decide to handle dom manipulation yourself)

as a developer you only started using the profiler when?

too many http request, can be much optimised (yes i realise cdn, but ttl there can be managed nicely even for a single delivery)

css not remaned and compressed

own js badly minified

using jquery ffs!

>>
anyway, perceived rendering would have solved this by the metrics solved is measured here and simply rendering on the server and giving a 500ms ttl on the cdn would have been faster + not overburden their servers.
I don't know their stack so perhaps the next staement is useless: is this api with the big taskboard open aka can I have a stab at it and try to explain and proof what I am talking about.
Given there's 3x the types of devices in iOS land (phone, iPod and tablet) vs most people using Android phones, the difference isn't that huge. I do find, though, that I tend to browse more on Android because I need to get something done or check up on something. On iPad, sometimes I just tap around for the heck of it. :)
Evgeny Morozov takes aim at Tim O'Reilly
My guess is the background app updates are contributing to this a lot. A couple large game updates could consume a few gig in a hurry.
For every legitimately influential person who posts on Quora, there are 10-20 "CEOs" with expired or dead links to their "startup".

The whole community on Quora also seems uncomfortably obsessed with wealth and being/getting rich. I can't browse through it for too long before I tire of that atmosphere.
>It's interesting to see the meteoric rise of objective-c due to apple forcing it down developer throats. As someone who had to learn it to do iPhone dev, I find it objectively terrible compared to all the old favorites(C,C++,Java,C#). Partially because the language syntax sucks, but also because apples standard library sucks.

Yes. And yet, Objective-C, for application development, pisses all over most of the "old relatives". Saner than C++, can drop into C for close to the metal performance or be high level with a GC and all, and is more dynamic than Java (which admittedly is not hard).

But even you personally don't like its hybrid syntax, to even state that "Apple's standard library sucks" make your comment loose all credibility. Cocoa and Foundation are among the nicest and more feature complete libraries and framework collections there exist.

From the way you describe it, it sounds like you wanted something like the VB6 or .NET ecosystem of third party libraries...

>Basically I'm pretty sure nobody would use objective-C if apple didn't strongly push it on iOS and OSx developers.

You pretty sure, but also pretty wrong. Adoption might be quite smaller if there wasn't a huge potential market in the form of iOS users, but Objective-C was (and is) quite well regarded as a programming language and has always had hardcore fans. People who program in it (not just because they had a couple of assignments for iOS apps in 201x) tend to love it.

Heck, even back in the day, the first browser was developed in it, as well as the first true first-person-shooter. And nowadays, one of the most advanced GUI userlands, and the more cohesive mobile app platform.
Easy: you are. Lots of people live in San Mateo. It's still a suburb. Evanston and Oak Park are suburbs of Chicago that are denser than San Mateo. So is, for god's sake, Berwyn.

To see how silly population density is as a metric for what 'potatolicious is talking about, consider that your metric says that Berwyn and San Mateo are more like cities than Bellevue Washington, which is so independently urbanized that it stretches the definition of "suburb" but has a density of only 3k/sqm. Look at downtown Bellevue in street view on Google Maps. Now go look at Delaware and 3rd in San Mateo.

The idea that you might think San Mateo is more of an urban area than San Jose --- I mean this without annoying snippiness in my heart though I know it is, characteristically, going to sound that way --- suggests to me that you haven't been to one of those two cities before. San Jose is self-evidently a real city. (I look forward to you embarrassing me by informing me that you've lived in both).
It depends on the virus. Most viruses you can only get once, then you fight off the infection (according to the model, anyway). Facebook may be a little more like herpes.
Are you just making stuff up? Chile has a public education system with voucher options, but almost all of the schools are publicly funded with voucher options, and even the private ones get government subisdies. And health care is a mix of public and private (like most countries) and free if you are over 60 or make a low income. So I think you are going to need to elaborate on those points a bit more
Wonder why Outbox didn't follow this model. Any advantage to sending out a messenger to do a physical pickup vs. 1583?
Microsoft to Allow Foreign Customers to Store Data Overseas
good luck, it's a commendable thing that you're doing.
Isn't this mitigated by the 100MB limit while on mobile data?
Unfortunately I haven't been able to find anything quite like it. Top coder is a programming competition- although it's normally algorithms based instead of objective based. If you do find anything, let me know! You can also still compete if you're not a student, although I don't think you can win prizes.
Ask HN: SSL HSTS errors on News.YCombinator.com
Hi all,

I'm getting HSTS errors for Hacker News:
Fehlertyp: HSTS failure
Empfänger: ssl2000.cloudflare.com
Aussteller: GlobalSign Organization Validation CA - G2
Hashes des öffentlichen Schlüssels: sha1/ddn13fxQOaSS8dIrqUYrlF2W/wg= sha256/+RK+YX5huqrTqIU/vr6I/axv5jfL/CQrq/firRp0GmY= sha1/eMdNeRjaGNOIt6gkHHXLb1A363o= sha256/OqqTlivI4taTCDJE1oq61tAsdnSQ/13Ibp0QKE1H7tc= sha1/h9vUX7CSjU4d+BVn5/Krr9YrZ3U= sha256/K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=

Doesn't look like it'd be related to the maintenance (storage switches should not result in SSL errors)...
All the other social networks were growing right up until they didn't. They had a similar percentage of the online world.
Funny story about that 1gbps needing fiber. In fact, a DOCSIS 3.1 modem at 24x8 will easily hit 1-1.5gbps with half the investment necessary as it would to roll out today under DOCSIS 3.0. So expect to magically see cable start competing with Google Fiber if it actually takes off! ;-)
I guess iPhone 5c users can go ahead and eat shit then?
Getting Back Up
Dive into Mark [GoDaddy Landing Page]
You can look at Facebook as having launched independently in a number of different markets.

Initially it was Harvard (2003), then Ivys (March, 2004), then selective colleges, then all edus. It then tapped high-school students (September, 2005). It was opened to the general public in September 2006. Introduction to other countries also generally came later in the game, and FaceBook have had to compete with alternative networks, particularly in China and Russia. (Most data here from Wikipedia's Facebook article).

It's helpful to look at each of these as a somewhat independent social network.

We're hearing now about significant defections (or failures to join) in the < 25 market. Facebook's growth overall in the US peaked ~2010-2011. It's been growing outside the US, but that's a much less lucrative market for advertisers. Breaking out growth / user patterns by introduction point would be particularly interesting as I suspect this would model earlier social network growth more accurately.
Thanks a lot for your support. I will look into that :)
I am a Quora member, but never ever read the site logged in. Instead I just suffix "?share=1". There's something about blurred content that requires me to 'unlock' it that just puts me off. Maybe it's the memory of Expert's Exchange.
Yes, and as Hasbro does so, they destroy one of my favorite games as a kid (Risk). Sorry for the tangential comment, but I was floored I discovered what they did to the game, as I was searching for Risk (the classic) at local stores to buy for my kids.
The problem with that reasoning is that it only applies to desktop. It's mobile where reading HN is painful, and that's exactly where I can't use custom stylesheets, at least not without installing a new browser.
> just posted a donation link

Poster trying to represent link as donation for ukrainians, and this is lie. This is help for specific political forces. Someone may think they a better than current government, but they for sure isn't "the people" as poster trying to represent. I wont go into political discussion anyway, it isn't topic for HN.
Avoid paywall (am I the only one this always happens to?):

http://google.com/url?q=http://online.wsj.com/news/articles/...
GitHub Pages seems to be redesigned as well: http://pages.github.com/
> Then you should stay away research and toy programming languages and stick to tried and tested languages and compilers.

Aw hell. Back in 1992, during my Software Engineering class project, we discovered a bug in GCC where it produced wrong answers if we swapped the position of two unrelated functions. We found multiple bugs in GCC, in fact.
Any increase in average utilization is an insignificant cost compared to the elephant in the room: Broadband speeds have been essentially stagnant for 10+ years if you look at tech development vs what gets deployed. The ISPs have been reaping the savings that faster backbone technology brings and not passing them on to customers, while failing to deploy improvements in last mile connectivity tech.

Actually the tech would have gotten better much faster if its development hadn't stalled due to low demand. If you plot a Moore's law type from the 90's, we should be getting 10 gigabits at home by now.
Introducing Windows Azure WebJobs
Not in Australia, they don't. No carrier provides an uncapped plan, and most plans have to be extended with a 'data pack' just to get 1GB/month. If you go over that, you start getting charged per Megabyte.

It's ridiculous.
It was only used for canvas in the initial release before being deployed more widely.
>SQL is already a leaky abstraction over the DBMS system's particular optimizations, or haven't you heard about people rewriting queries for Postgres or Oracle because of the engine's peculiarities?

Which doesn't detract from my argument. Since leaky abstractions are bad why on earth would you double or triple them, building another abstraction (ORM) on the first one (SQL)?

>There's nothing incompatible between using SQL for that 2% of cases and an ORM for the rest

For serious development you'll find it's not just "2% of cases". YMMV. And again, there is something incompatible: certain ORMS make it difficult or prevent it altogether, and even if they allow it you end with a hybrid ORM/SQL codebase.

>I don't think anyone's afraid of SQL

I've met plenty of people who do. Some even think it's alien, the same way some people wouldn't touch LISP syntax with a bargepole.

>but I sure as hell would be afraid of maintaining hundreds of plaintext SQL queries every time I add a new column

If you need to do that, then you're doing it wrong.

>All SQL implementations have ad-hoc additions that are platform-specific, and most ORMs work pretty damn well.

"Pretty damn well"? As in generating slow ass queries, needing 300 pages of documentation (I'm thinking of Hibernate) for stuff you can do in 5 minutes in SQL, etc?

Here's a gem from Django's 1.6 release notes (that somebody praised its ORM in the comments above): "The Model.save() method now tries to directly UPDATE the database if the instance has a primary key value. Previously SELECT was performed to determine if UPDATE or INSERT were needed".

>This is BS. I have to touch a substantially larger amount of code when refactoring SQL than when touch ORM queries.

Have you even tried to understand what it says? You can take your SQL and use it in another language, or in the DB CLI etc. Your ORM code is tied to your original codebase. No using SQL Alchemy if you switch to Java.

>Seriously, have you even used a decent ORM?

I've used SQL Alchemy, Hibernate and Django's ORM.

Never found a decent one.

But I know that connect-the-dots, Visual Basic style developers swear by them.
crazy libertarians? How so?
There's a bit more followup on this issue over here http://www.informationweek.com/security/vulnerabilities-and-...

In it, a Chrome representative said: "The security of our users is a top priority, and this feature was designed with security and privacy in mind. We've re-investigated and still believe there is no immediate threat, since a user must first enable speech recognition for each site that requests it. The feature is in compliance with the current W3C standard, and we continue to work on improvements."

Check the informationweek article for more, specifically around the errata to remove that sentence from the spec.
Modern browsers have made it much easier to get to the page you want, I think. If you're in the address bar, probably for most people "f" or at most "fa" will pre-fill facebook.com, then you're talking 3 button-strokes... I'm curious how many one-letter chrome-autofill-suggestions I regularly rely on, but for me, muscle memory dictates t-f-enter to get to facebook (t opens a tab when using vimium, but you can substitute command-t if you like).

Then again I am a developer and I use vim, so I think about things like how many keystrokes it took me to execute a command... :/
TrustyCon vs. RSA and NSA: New conference pushes trustworthy agenda
I quoted that as a joke. I'm too familiar with bug bounties to ever expect one million dollars as reward for a bug. Let's hope people don't take it seriously. Lesson learned: since I'm not a native speaker, I shouldn't joke unless the joke is obvious.
You guys don't have wifi in Australia?
Its experts-exchange v2.0 with more topics.
I've always thought of Stripe as a "faster horse" in the world of payments. I expect Google, Apple, or Square will find some way to disrupt credit cards completely and move consumers over to a new method of payment for most transactions. PayPal would also like to do that, but I'm not sure they have it in them. And Bitcoin may well upend them all.
If you get sick of individually hacking website DOMs, you can install a CSS manager (Stylebot, Stylish), or Greasemonkey for that matter, to make your edits permanent.

That said, I'm strongly considering "* { display: none; }" for quora.com.

No, it's not that fucking annoying. It's worse.
Honestly, I'm going to buy a nice bottle of wine the day Alito, Scalia or Thomas kick the bucket.
My understanding by reading patcheudor's responses is that the issue isn't with Stripe's PCI compliance, but rather the fact that merchants that use Stripe's API need to be fully PCI compliant. According to him, using Stripe's API doesn't obviate the merchant's need to be fully PCI compliant, unless they do something like open up another window where the URL clearly shows that they are inputting a form from Stripe's own servers. Otherwise, the merchant needs to conform to full PCI compliance.
Ask HN: Using Python for large, distributed system
I've been a Python fanboy for about a decade now. I've written many small Python programs by myself. They were usually one-offs and did a particular task well. Last year, I convinced my team to use Python for a somewhat large, distributed system. Development was a dream, especially when we started using the PyCharm IDE. That said, as the system grew in complexity and features were added, many parts of the system feel brittle. Make a few changes and splat ... there's a runtime traceback. We definitely made one big mistake, which is we didn't do Test-driven development. I am ashamed to say, we have a tiny amount of regression tests, which I think is the root of the problem. I guess after writing over 10K lines of code for this system I've learned that regression testing is absolutely essential for dynamically typed language. Not news but a hard learned lesson for me. I'm curious if people have other tips to share when dealing with a large python code base over time.

Thanks!
I don't exactly see the problem this is solving. Though I admit it can be complicated to get just the right CSS for some complicated layouts, I wish they would have provided an example where 'with css you'd have to do x, but with tether it's easier to do y'
Snowden Speaks, Says He Acted Alone. Should We Believe Him?
I don't think average density is a very good metric for San Jose. Downtown San Jose is quite dense, with a lot of skyscrapers. On the other hand, there are some parts of it that are definitely very low density. I definitely agree that downtown San Jose is more dense than any of the places I mentioned.

With regard to San Mateo being "a suburb" without "any significant transit," I can't agree. I see people taking the bus all the time. There are a lot of people who work in downtown San Mateo and live nearby.
Perhaps the main reason why we are so strongly inclined to talk of the head as the locality of our thoughts is this: the existence of the words "thinking" and "thought" alongside of the words denoting (bodily) activities, such as writing, speaking, etc., makes us look for an activity, different from these but analogous to them, corresponding to the word "thinking". When words in our ordinary language have prima facie analogous grammars we are inclined to try to interpret them analogously; i.e. we try to make the analogy hold throughout. -- We say, "The thought is not the same as the sentence; for an English and a French sentence, which are utterly different, can express the same thought". And now, as the sentences are somewhere, we look for a place for the thought. (It is as though we looked for the place of the king of which the rules of chess treat, as opposed to the places of the various bits of wood, the kings of the various sets.) -- We say, "surely the thought is something; it is not nothing"; and all one can answer to this is, that the word "thought" has its use, which is of a totally different kind from the use of the word "sentence".

^ that's Wittgenstein and not me writing there, but I believe that responds to your claim adequately.
> Is there a name for the phenomenon that the first entries in any contested ranking tend to be less interesting?

'The fanatics are picturesque; mankind prefers to see gestures rather than hear reasons.'
Actually, if a rich and a poor actor both compete for a pot, then the poor could take 80% and suddenly become the rich. This simulation doesn't track individuals, it only tracks the 1, 10, 25, 33, 50, 66, 75, 90, 99th percentiles after a number of simulations. The rich and poor are likely switching back and forth rapidly.
For reference, the old design [1] vs the new [2].

[1]: https://www.dropbox.com/s/7f6x473a6qaw4vi/Screenshot%202014-...
[2]: https://www.dropbox.com/s/70zjz7x4tjh3u0k/Screenshot%202014-...