skysight-inc/HackerNews huggingface dataset:
For digital products, a download link is included in the emailed receipt. I use the Dropbox API to create a temporary download link that is active for 4 hours. I don't expose the Dropbox link though. Instead, the customer clicks a Snappy Checkout link and I redirect them to the Dropbox link.

That extra step is in there because I check the customer's IP address to ensure it's the same on every download attempt. If the IP address changes, I send the customer a new download link via email.

I know it's not possible to stop sharing files across the Internet. I think this process does a good job of preventing it -- without adding too much grief.

When purchasing a product that is shipped, shipping fields will appear below the credit card information fields.
"Would such folks ever consider taking lower pay to work for what you'd consider to be a "socially conscientious" employer?"

c.f. the attraction of working at Wikimedia for far less than you might get at Google or Facebook.
Nice thinking, love the zero login aspect like pastebin, the keyword is an interesting idea.

I have an idea on how to support reserved keywords

When you submit a url to a keyword you can optionally include a 4 digit pin

so

http://leash.co/4567@neilellis/google.com

When you read them you just use

http://leash.co/neilellis

You list all 'reserved' usages first and then unreserved after (say if a user clicks a button or something to unhide them)

The first person who submits a pin for a unreserved keyword gets to reserve the keyword for a month.

Anyway, just thoughts. Like the idea, keep em coming!
Oh? How is it better than rethinkdb (at the same job)?
so.. what is it?
So does this mean document level locking has been implemented or just the foundation for its future implementation has been laid?

I can't hold my breath much longer! :-)

Edit: docs don't make any mention of it but then again they probably haven't updated them yet (fingers crossed!) http://docs.mongodb.org/manual/faq/concurrency/#what-type-of...
The Kidsmap: For the Explorers of Tomorrow
That's probably pretty unconstitutional in most countries, though. And if the EU court has a problem with ISPs keeping this data for privacy/human rights reasons, I would imagine it would be even more aggressive against governments doing that.
It might be able to read the memory of the ssl server that's making the response. Including maybe the ssl private key
Rules allowing spouses of H1B workers to work proposed
This says it is patched? http://possible.lv/tools/hb/?domain=stackoverflow.com
I love these two lines from Shneier's earlier article, the one he links to at the end:

"The 'best cryptographers around' break a lot of ciphers. The academic literature is littered with the carcasses of ciphers broken by their analyses."
I get the point they're trying to make, but putting a little girl in a kitchen with pink pastel colors, a princess egg, and other gender-biased artifacts defeats the purpose. It only reinforces the idea that girls are different and need to be treated that way. I suppose it eases gender-biased parents into buying more constructive toys for their girls, but that's only addressing the symptom, not the problem: equality.
Don't want to open the iOS vs Android box here, just pointing out that for all the downsides and problems with App Store reviews (I am an iOS developer, believe me, there are many) this sort of scam happens far less with iOS because of the reviews.
Browse through 100k 3D models
Strace + tcpdump + lsof = sysdig
Sysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze.
Think of it as strace + tcpdump + lsof + awesome sauce.
> why not just send the actual message via that mechanism?

suppose you can transmit information securely only for some time. Exchange one time pads ahead of time, and use them later to communicate over insecure channel
CQL is compatible with Thrift-created column families (the inverse is not true, though). Just do a DESCRIBE SCHEMA from cqlsh and see how CQL interprets a particular Thrift-created column family, then use regular INSERTs.
I don't think this is the bug per se, but it may very well be due to their reaction to the bug. The safe response for secure systems is to reissue certs after patching impacted OpenSSL instances. It looks like they instead have switched over to a previously-issued wildcard cert for *.stackexchange.com. The cert is valid, but it's for the wrong domain.

This is more likely the result of a sysadmin screwing up the response and not bothering to check the work. Maybe s/he should post on stackexchange for some help :D
Most of the criticisms of the study are inaccurate, but I would like to see this redone with the old violins receiving the same tuning/treatment as the new ones. Depending on the condition the old violins were received in, not being allowed to tune them could have had a big impact on preference. I know I'd rather play a $50 guitar that's in tune than a $5000 one that's out of tune.
RAII is a minimum. You also have to treat any direct and indirect (unchecked) pointer arithmetic as a potential security vulnerability though. For example if you use the [] operator of a vector you can still access memory outside of the allocated space. Instead you would have to use the at() method which actually checks the bounds. Even iterator are problematic as the iterator on a vector also ignores the actual bounds iirc (though with most idioms the comparison against the end iterator is pretty error proof). This lends itself to constructs where you do not work with any indexes at all in the way foreach loops abstract your position in a container away.
This looks very nice. The only thing that's a little confusing is that you provide a "Typeahead" component, but that was removed from Bootstrap 3 in favor of Twitter's standalone library which is also called Typeahead. I think it's great to provide the functionality (and clever to do it with Tooltip), but wonder if it should be called something else. (Autocomplete? Tipahead?)

Also, it would be nice if you used the inline annotation syntax (['foo', function (foo) {}]) to make the code minifiable.
My source is the Hackaday post at http://hackaday.com/2014/04/08/dirt-cheap-dirty-boards-offer..., which says:

[Ian] at Dangerous Prototypes has just announced Dirt Cheap Dirty Boards, a PCB fabrication service for times where quality doesn’t matter too much.
Great job Mike. I think you could be on to something really huge here. Will have to try out in depth when I'm not on my phone. :)
A lot of hype... And we still have db level locking. If document level is too difficult, at LEAST do collection level (not that it is too much better, but least it some real improvement).
Well, I think I must disagree with you in here.

I'm sure that it is a viable choice for some use cases, it's just that I didn't found a use case for it yet.

Being able to choose from PostgreSQL, Redis, Cassandra, heck, even ElasticSearch made me always choose one of those over MongoDB, at least for the problems which I had been trying to solve.
the1 won't tell you. S/he's teasing.
I loved the IP Avian Carriers too.
My favorite is "Hyper Text Coffee Pot Control Protocol" or RFC 2324, defining the HTTP error 418 "I'm a teapot".
I successfully obtained the private key for my local Apache install this way once, though I'm having trouble getting anything reliable.
The one posted in a previous thread is significantly more clarifying. It features a web server and a command line version:

* Live version: http://filippo.io/Heartbleed/

* Code: https://github.com/FiloSottile/Heartbleed
Author does not say that smartphones is a preferred choice for developing.

Look at everyday of an average person, and you will notice that most are indeed spending significantly less time using PC's than few years ago.

I am scared to observe that these people use nothing beyond facebook.
The way I've thought about this is in terms of available attention and routine.

I may spend more time staring at a computer monitor, but that time is spent on my work routine, where new tools and apps are added sporadically at best.

My phone, on the other hand, is where I spend time in a less routine way. Much of this time is up for grabs and the way I spend it changes on a much shorter cycle.

But, to your point about other domains, I think the obvious answer is that there are certainly myriad products that don't need to be mobile-first today, if mobile just doesn't tie into their users' primary workflow. But even most of those services (HipChat, say) can become far more powerful by adding mobile apps. GitHub would be silly as a mobile-only service, but there are plenty of cases where accessing from mobile could be valuable.
Why not use the existing convention for names of infix operators like __mmul__ but allow then to be infix as well.. So, we could write A __mmul__ B.

I think this is more clear than @ and is already familiar to programmers that deal with operator overloading methods. It would also enable the addition of arbitrary infix operators to python.
There are numerous people and professions who intentionally remain independent contractors (my father is one), rather than becoming an at-will employee. Each party should have a choice: the worker about whether he joins a company as an employee (and gets the benefits and "security") or remain a contractor (and remove the cap on income and have more control over their work), and the company about whether they'd like to offer benefits and "security" as a method to attract the best talent, or if they'd like to operate with independent contractors (which generally will mean more work finding them, managing them, and maintaining quality).\

Really, it should basically be the choice between being a freelancer or an employee, and the choice between hiring an engineer/designer or just one off freelancers.
I just went to acid3 with Firefox 28 and got 100%...?
I didn't realize there was actually an end-of-support date for IE6.

Is there one for IE7?
Snappy Checkout does have an API (just some basic calls right now) & webhooks that can help with digital fulfillment. For my own business, a webhook notifies me of a new sale and I use the Snappy Checkout API to verify that the sale is legit -- which basically allows me to verify that the paid price matches the expected product price.

If you meant non digital fulfillment, I don't know much about that. I'm interested in improving Snappy Checkout to help in that area if at all possible.
I truely can not tell if this comment is meant to be flamebait, buzzword-laden sarcasm, or NoSQL fanboy-ist.
Thanks for checking it out. Let me know if I can help in any way.
Interesting. The Popular Science article is a bit inaccurate, though; they didn't mention that it's a battery, not just a fancy new charger.

This is a linked article that's more complete:
http://www.gizmag.com/nanodot-smartphone-battery-30-second-r...

A bit about the company and its technology from WSJ.com:
http://blogs.wsj.com/tech-europe/2013/11/13/biological-semic...

A 30-second puff piece about StoreDot and its tech from Time.com:
http://time.com/52651/storedot-another-promising-far-off-ans...

The company talks of beginning production in 2016. Based on the various limitations, that sounds optimistic. Current cell phones can't handle the high current required, the battery's too large, and the battery doesn't hold a charge as long as conventional batteries.

Once these problems are solved, we're going to see possibly a revolution in portable power. I'd love an electric car that recharges in 5 minutes!
With this release aggregation framework got super powerful. Now it returns a cursor. Now we can get the aggregation results and iterate over them. No more 16mb result limitation as well...
By the way if you are looking for all the above functionality provided by all the DBMS you mentioned in a single DBMS instance, you can check out amisaserver.com. Polygot persistence is just another fad.
I wonder, what does this mean for TokuMX
If they compete on price and keep the same quality of delivery service - my guess is they'll be fine. Or current bike messengers will just join Uber as it's an extremely powerful lead generation tool, similar to cleaners and Homejoy (as we've seen at least some small level of cabbies joining Uber - I don't have hard numbers, but I have at least one anecdote that this has happened before).
I think part of the confusion is that "mobile" means both phone and tablet.

Phones and tablets might run the same OS, but tablets are much more viable as a PC/laptop replacement. Maybe not yet, but soon.

I can "dock" my Nexus tablet with an external monitor, and bluetooth keyboard & mouse, and do a considerable amount on it (email, taking notes, even some development), then take just the tablet with me for review or minor changes, as well as simply looking at things with a mostly big enough screen. For that matter, adding just the b/t keyboard is pretty useful. In a pinch, I can run the same apps & content on my phone, as well, which complements the system, though the phone is a poor viewport for most content.

People might downplay the capabilities of a tablet, but the configuration mentioned above is considerably better than anything that I used to do actual work in the 80s, and the resolution, though not size, matched most of what I worked on in the 90s.
Hey, I am putting the finishing touches on lawncheer.com, will be launching in a couple weeks, hope to meet the mowing/landscaping need.
This seems to be the most likely explanation. Serverfault [1] also has switched to that same certificate.

[1] https://serverfault.com/
He missed something..

Let me explain, what are big networks buying?
Think Yahoo, Facebook, Google, MS, etc..

The mobile app now represents user data to buy...and that is what we are seeing in some of the acquirehires buying sprees is that the mobile app is kept alive after the buyout because the firm doing the buying is buying user data.

Thus we still will see some $1B or more home runs if we know and understand what they are buying
Chances are that kids learn how to be social from their parents. My kids read (past and present tense) fantasy stories, program NXT, play lots of sports, explore the backyard alone or with each other and are unfortunately fairly independent, just like me.

I do my best to raise them to be social and to make close friendships. They are quite the social butterflies but as their main influence, they copy a lot of my habits. As I had been on my own since my late teens, this meant that I've learned not to depend on others and surprise, they copied me.

Maybe these personality traits are correlated with programming robots but I don't think programming robots causes it. It's more what they are taught at home.
Ask HN: Certificate Revocation for Heartbleed?
As we all know by now, any certificate potentially exposed via the Heartbleed bug should be revoked, and a new certificate generated. However, certificate revocation appears to be of dubious effectiveness in practice [0]. As a site operator, is there any practical measure I can take to give teeth to a revocation?

[0] http://news.netcraft.com/archives/2013/05/13/how-certificate-revocation-doesnt-work-in-practice.html
I don't get why they don't just let * do matrix multiplication on matrices, and introduce .* for element-wise multiplication.
Because you are. I'm with PavlovsCat -- the relative price comparison is being used to sell extraordinary profits, and otherwise smart people just eat it up.
I'm assuming the same regulations and laws regarding what can be sent apply to Uber Rush as the couriers and messengers working outside of Uber. The same way the same driving laws (like speed limit, stop lights, etc.) apply to Uber drivers.
Of Monkeys and Microservices: An Introduction
What do you consider electrical engineering? What did they teach you in class versus what you would use today/not use? Are there jobs out there/do you continue to look & see what's out there in your field or are each of you stuck in your respective roles?
I got "100%" too, but there's multiple criteria for passing:

- 100%
- Animation is smooth, no stuttering
- The final rendering matches the provided image
Bytemark do.
Am glad someone has brought up TokuMX. Tell me, have you used it in production yet?

I wonder why 10gen hasn't made any official comment on the work the folks at Tokutek are doing to enhance Mongodb's features.
We're hiring an operations person
Dynamic languages tend to gain more from JIT as AOT due to such issues.

On the other hand, have a look at Dylan, as it might inspire you:

http://opendylan.org/
You give each party a briefcase full of 4 TB hard drives full of random numbers generated from a USB attached atomic decay device.

Now for 1,2,10 years depending on your rate of communication you can communicate using the one time pad.

>why not just send the actual message via that mechanism?

The point is you only have to exchange pads periodically, not every time you communicate.
This was originally posted last week, but the fact that I had text-transform: uppercase on my headers meant it got marked as spam really quickly.

It was suggested that I contact the admins for permission to repost it, and they said it would be fine.

Original thread: https://news.ycombinator.com/item?id=7521530
I was able to graduate with no debt by attending College of the Ozarks, where students work 15 hours on campus to pay for tuition. I worked during the summer to take care of room and board and books. I might be biased, but I still think it's a great school.

https://www.cofo.edu/
"Russian's ban on gay" doesn't exist. Sochi, for example, has many gay clubs. The Russians passed "you can't promote homosexuality to juveniles" which is very different.
I see, thanks. So a game would probably be hard, since games require low latency. Something might be possible if one could find mechanics which don't require high accuracy...
Personal Touch Signature Makes Mobile Devices More Secure
I'm not affiliated with these guys: http://pushmon.com/
It's not self-hosted. Other than that, you create some type of a link on their website, and you have to go there every once in a while. You also set up notifications (SMS, email, etc), and if you don't go to their link for some amount of time, they send out alerts.

It's marketed for checking if script ran (script would go to website after it finishes, and lack of that ping results in alarms).
For the truly lazy, this was my approach:

map.overrideKey('up', function() {
if (map.countObjects('boss') > 0) {
for (var x = 0; x < map.getWidth(); x++) {
map.placeObject(x, map.getHeight()-5, 'missile');
}
} else {
map.overrideKey('up', null);
}
});
"The US has no such data retention law...":
Well, NSA & colleagues do their very own data retention, outside of any law. That they violate the Constitution in doing so doesn't seem to be enough to have them stop.
Could it do things like offer a yearly subscription with a starting price of $x and a recurring price of $y? Basically, like an ongoing maintenance - buy the product at $x and then pay $y for yearly upgrades/support.
What a coincidence, https://tools.ietf.org is vulnerable by the Heartbleed attack (https://news.ycombinator.com/item?id=7548991), which is enough to consider IETF private key compromised. Remember, every joke has a grain of truth.
This proposal has nothing to do with the current vuln. Heartbleed lets you use the negotiation/handshake to read all the memory on the server. It has nothing to do with certs at all. Revoking a cert just means you're closing the exposure after the fact; it's not really preventing disaster, more like mopping up after it.
Updated the docs to add a more descriptive tagline, thanks for the feedback.
I understand a fixed loan and a variable loan, and those are what I'm used to considering when deciding whether to borrow money.

I think the issue that the post brings up is that the target market for the microcredit borrowers consists of people used to flat rate loans, which is totally alien to the target market for lenders. I think the lenders will likely mentally map "flat rate" to the closest thing they are aware of, which is likely "fixed rate."
Show HN: Rubymotion Wrapper for communication with Meteor apps
Will MongoDB still segfault under certain circumstances?
The most amusing part about the fictitious 'social' contract is that its proponents are loathe to respect ACTUALLY SIGNED contracts.
>> try to get those done by freelancers, I would estimate the cost at 3-4X higher

A lot of times you can get things done with a freelancer for cheaper. The cost comes A) when you want to change things and have to start over, potentially with someone who has never worked on your project before and B) you don't have someone thinking about your project design/code/product full time, so you are unable to push improvements or respond to issues continuously.

To grow past a certain point, you need someone who has a financial incentive to put your project at the front of their mind - something employment is great at.

For the Uber v. employee model - employees would give Uber better control over supply, independent contractors get more control over when they can work (hence the number of people I know who drive Uber/Lyft/Sidecar a few weekends a month just to pay their SF parking costs).
11 Reasons Why Newsletter Beats Social Media
The military would agree with you. After all, they're the ones with the greatest chance of getting killed in a conflict.

The problem is the policy makers tend to regard them as the first option (when they should be the last) for a number of reasons. The first one in my mind is because the number of senators and congressmen with children in the military can probably be counted on less than two hands. None of them would publicly state that they want to see Americans killed in a war, but their actions say different. Dunbar's Number[0] at work.

The other reason is that the US military is amazingly successful. They've fought a two-front war, one against the fifth largest army on the planet, and defeated all opponents. And did it without putting the entire country on a war footing (conscription, entire industries being converted, and so on). So (from the politician's view), why not hand the problem over to someone who can get stuff done?

Lastly - As much as I'd like to believe the world is full of potential friends, if only we could meet and talk -- the reality is that there are a lot of people out there who hate us. Many of them because we killed a relative or friend. But some because we don't live up to their expectations. As weird as that may be. Consequently, a strong means of national defense is required.

[0] http://en.wikipedia.org/wiki/Dunbar's_number
Como Determinar o Seu Orçamento para o Google Adwords
Everything will segfault under certain circumstances.
The distributed code is parsed by gulp-ngmin so you can minify it safely: https://github.com/mgcrea/angular-strap/blob/master/dist/mod...
Sorry, let me be more clear: In the courses and books I've seen and read novices don't get taught secure coding techniques as C++ is often introduced as a superset of C and security in general is not of interest to the teacher. Then later on when they transition to the web as a primary source of information there is a lot of legacy C++ code lying around that does not use modern memory management concepts. Also, as nobody has ever told them the importance of strict coding styles for security they also don't start looking for them, even though it would be possible to find them with the right keywords.
Exactly. Here's some data to support your assertion:

https://news.ycombinator.com/item?id=7512799
I just used Reflector, which, at the time was free. There were a few issues that I had to tweak since reflector didn't do well with things like switch statements ... but for the most part it wasn't too bad. I was able to discern most of the munged variable names just by looking at the code and being familiar with the domain of the company.