skysight-inc/HackerNews huggingface dataset:
Secure web forms? (Bank account, social security numbers, etc.)
I'm a developer with an agency that works exclusively in building and hosting WordPress sites. We've got a client who wants a credit finance application form that requests social security numbers and banking information. I'm not about to build this in a WordPress site, so I'm trying to find a 3rd party hosted service that can handle the transmission and storage of this data securely, as we don't want to deal with the PCI compliance issues of handling this in-house. I thought HN might be a good place to solicit recommendations. I've already hit up Google searches but am coming up empty with solutions that allow for the storage of this type of data (even for a short time), and/or even claims to be PCI compliant. Any advice would be welcome. Thanks.
Simply Grid Is Putting Clean, Easy Power Where People Need It
> Deletes every single thing the student contributed

Yes, this is what I don't understand. I think other commenters here haven't actually realised this is what happened, as well, and aren't seeing the problem.

One thing I find annoying about Wikipedia is that there is basically no owner or point of contact for the content. So, if I have an idea for a change, I can add a comment to the Talk page for the article, but it'll often languish there for months (years) on some pages. I've never gotten a sense of 'community' there, and although I've made 500+ edits and contributed new articles and been a member of a 'WikiProject' I still wouldn't class myself as a 'Wikipedian' nor would I know how to assign that role to someone else.
Massive discussion: https://news.ycombinator.com/item?id=7694436
I have previously used LastPass, 1Password, and RoboForms. Nowadays, I used Dashlane -- it's far-and-away the best password manager I've ever used. Both their Android client and Chrome extension have great UX.
Especially because /dev/random's ability to block when it doesn't have enough entropy is dependent on accurate entropy estimation. Since the entropy estimator isn't accurate (it can't be, it's an undecidable problem) there will be attacks possible on the entropy estimator, either causing it to block when it shouldn't (DOS) or output data with insufficient entropy.
OS X: How to Configure the Network System Preference
How are you searching for images? I used !images but it just sent me to Google Images.
Notably, their code for their Firefox extension^1, while not free software, is available to look at. Firefox extensions are delivered as an XPI file (https://developer.mozilla.org/en-US/docs/XPI), which is simply a renamed .zip . So it can be extracted with gunzip, 7-zip, winzip, etc.

Inside the .xpi are various human-readable files, including .js, .xml, and .config files (https://developer.mozilla.org/en-US/docs/Bundles).

So you can literally examine the source of any Firefox extension. And not just source you hope is the same as the delivered extension^2, but literally the running code.

So no, it's not free software. But it is accessible for you to read^3.

[1] I _know_ this is true for Firefox. I think it is for Chrome, but I'm not sure. I have no idea for any other browser.

[2] How do you know the code for e.g. Firefox that you clone from https://hg.mozilla.org/mozilla-central/ is the same code used to build the browser downloaded at mozilla.org ? You don't, unless you go to the lengths of building it yourself and doing a bitwise comparison of the executables, but that is going to be error-prone. But you can pull the Lastpass extension out of your profile and see the exact code being run.

[3] Unless they download code from somewhere and eval() it.
And then you reported him to the local taxi commission, right?
> Wikipedia could serve as a lower-cost learning experience for budding young academics; the student got a real taste of having their input considered and rejected by a semi-anonymous stranger in a position of editorial power, which is a valuable (and hard) lesson to acquire at a young age.

This should be standard Welcoming Committee text.
Oh I don't feel any shame but admitting it does tend to get you a torrent of abuse from programmers of that "type" and I suspect most people will know what I mean.

I don't have time for zealots so I head it off where I can.
True, some people use a different address for each service (ie. yourservice@mydomain.com), and they tend to be the the kind of people one would want to hire as engineers! I wonder if Sourcing.io figured it out somehow, but at least compared to option 1 it seems better to look them up manually.
20 BTC seem quite cheap for these kind of bug no?
Folks on oss-security are skeptical about this (and rightly so, since posts like this have been showing up regularly since heartbleed). http://seclists.org/oss-sec/2014/q2/246
Don't center and add the fixed horizontal limit for images when there is an instant answer.
I would love to use DDG as my default search engine but anything other than Google is extremely poor when it comes to the non-English side of the WWW. Google was way better at sorting Greek web-pages last time I checked. I'll give DDG another try though, might turned better...
Your last argument, I find it irrelevant. Buttons and links etc. change colours not because of their inability to indicate their function, but to enhance the interactive experience. In most cases you get exactly the same effect with so-called "skeyomorphic" elements, no difference at all. The whole discussion has nothing to do with your "underlined links" argument.

The flat look has received a lot of criticism in the past couple years, but to be completely honest, in the many arguments I've heard against it, I couldn't really find one that can really stand it's ground if I may say so. On the contrary, I find a lot of merit in the new principles that are being embraced trough this approach, such as e.g. the emphasis on interaction to distinguish elements, instead of artificially imposed "symbolisms" (whether this is an underline, or a button-shaped, well, button :) ). This gives me a hint that, as a design community, we have a more mature approach to designing for those unearthly things we call "devices" than we did a few years back :)
Anyone used liquidweb?
I did not say that they have 20 sales people for VIP. I said they could hire 20. I also did not say how many customers they have for VIP. I was doing a what-if analysis of sales expenses.

What is your analysis? Are they worth $1B? If so, why?
Does anyone know how common the name "Jesus" was in those days? For all we know it could the equivalent of John or Mark today..
Someone just needs to find a way to turn the bitcoin mining problem into an antibiotic mining problem.
SoundCloud client for your iPhone
I'm in the camp that actually likes the new look. It conveys a modern minimalist view while the extras just get out of your way.

I've been mostly against flat design for a number of reasons but IMO, you've achieved a great design. I really like the minimalism of the hamburger button. Again, everything just gets out of your way.

Perhaps enlarging the font-size of the search result snippets might help with the contrast complaints - personally, I like your use of the grays. Again, it conveys a modern design.

I really hope that there will be an updated iOS app soon too :)
Why doesn't it count?
Sounds similar to the "no schema" claims by the NoSQL crowd. I see good reason to have a defined schema in most cases.
Here https://www.evernote.com/shard/s259/sh/83a4a781-7511-4815-b6...
"But, worse, aside from being non-useful, such stereotyping by (some) thinkers is the very thing they criticize in despise in others, so it's an error in thinking, too!"

Wrong, it has to start somewhere. The idea that stereotyping will just fix itself probably won't happen. Now, yes, the idea of "white privilege" is targeting one group, but it is the majority in this country (for now, 30 years it may change) and it is the group that has been the root of racism/bigotry in this country. But if it makes you feel better, you can say "majority privilege" instead.
Of course the first thing I did was a vanity search of my name and I have to say I'm really impressed (and a bit shocked) by the quality of the results:

All my social media profiles, all my websites, every project I contributed to, even websites where people credited me for my work when they used it in their own projects, all neatly sorted and with great context information. Definitely on par, if not better, than Google and visually much easier to digest. Amazing job!
I've heard that once you make mining "useful" for something other than securing the block chain, some of the security guarantees break down.
KeePass on my PC, KeePassX on my Mac, and iKeePass on my iPhone & iPad, with a shared database on DropBox.
I'm pretty happy with that setup, except for iKeePass, which is a little clunky. I'd really like to have a better KeePass client on iOS.
I'm a paying customer too. I'm ok with the minimal support. It was only $70. Just release when it's ready, even if it's only once every 2 years.
Guessing the down voters don't live in the UK.
Having been using DDG as my primary search engine for pretty much 6 years now, I really disliked the new redesign.

As mentioned in another comment, the contrast is really bad, I find it hard to read and focus on a given result. This is much worse when using f.lux.

I also disliked the left-align on everything, I rather have it centered as it currently is. When using big widescreen monitors there is a lot of whitespace in the middle of the screen and the results show up all the way to the lower left corner... It is pretty uncomfortable to look all the way there and this makes it harder on the contrast part too because there is so much bright light already coming from the background and the font color is a light greyish. This is specially worse in multi-monitor setups.

The image and video search tabs are great, and I really like the fact they replace zero-click results when you click on them, but I wouldn't leave them in the fixed header, there is just no need for them to be there. This would reduce the size of the fixed header and make it even better.

When scrolling results using j and k, the greyish background it adds to each result makes the contrast even worse. I remember when they were yellowish, they were better back then, imo. But current design works too. I also miss the current border around it, it makes it much easier for you to find yourself if you are switching tabs and going back to the results page. I haven't measured, but the font also seems a couple pixels smaller, is it?

It is also harder to distinguish between results. It all seems like a blob of text, hard to skim through results looking just at the title. In the current design this is fantastically easy, given titles are blue. I only read stuff below the title if the title is of interest. In the new design this is much harder to do, there is not enough contrast between the title and the text under it. Keep it blue, there is absolutely no reason to change this.
Honestly I have to ask are you a troll? You understand how insurance works right? Basically your hedging a long term bet that and event you are insuring against won't take place.

Lets take life insurance for example, its very cheap on say 20 year olds, who are active, non-smokers. Because overall a 20 year old, active, non-smoker has a much lower chance of dropping dead over night then say a 80 year old active, non-smoker. Its pretty simple stats honestly.

Insuring a HDD for 20+ years is the equivalent of buying a 350 year life insurance policy for a human. Statically its pretty safe to say that policy will payout.

If you buy a policy that will statically pay out, it means the policy total needs to be collected before the event will likely take place, therefore result in a net profit for the provider.

:.:.:

Example

So you take out a 30 year protection policy on a 2TB hard drive, this policy will pay 50 million dollars. 80% of Hard Drives fail in 4 years, which means as an insurer you need to collect AT LEAST 80% of the policy pay out by year 4 of the devices life cycle. This means you'll expect payments of ~1.041 million a month (at least). For the insurer to break even on your policy over an infinite amount of hard drives (which they're likely using a finite model), so a lot more.

Now you take a 30 year tape drive, for 50 million dollars. 1% of drives fail after 30 years. This means you can collect the total 50 million from at least 100 different contracts, meaning within 30 years each policy will only collect ~5 millions dollars in payments (13k montly payments)

The former seems completely idiotic to both the insurance agency AND the business asking for it. I don't know what your point is.

:.:.:

TL;DR: For insurance to work (profitably for both parties) you can't have the certainty of the event occurring within the policies term.
Mobile UX How-to videos (3-4 mins each)
Bell's inequality (plus the corresponding measurements) only rule out local hidden variable theories. But yes, that paragraph was a low point.
Maybe a crowdfund could be set up to gather together the 20 BTC and then open source it or distribute it to the backers
Cdist 3.1.5 has been released with Zypper / SuSE related changes
Oh, I needed a double take to get the sarcasm :)

On a more serious note, very few people actually hit the buy button before spending a few minutes on the product detail pages to at least verify it's the stuff they want to buy. People usually spend more time to research the product, and various buying options to make sure they get a best deal.

This is probably an intern project that was somehow hyped up to get some PR for Twitter.
It's worth noting that it's a national holiday in the UK today so many of the local HN regulars are likely to miss this announcement so it might be worth making another one at some point prior to the deadline.
@mojoe Thanks for your feedback. Sorry it came across that way. I've helped 50+ projects raise over $5M and almost nobody plans ahead or collects a bunch of emails ahead of time. I was trying to use the MacGyver analogy to defusing a bomb as an easy way to relate and an example of how to not put yourself in that situation. Hopefully the landing page analysis was helpful.
Same here, to counterbalance opinions, I really really like the new design.
Well it's what us humans do and it works OK for us. No internet connection or satellites required either.
But a good price to scam people; not too expensive, so it'll get a few bites.
Thanks for laying out your thought process, it's very helpful.

> I pointed out that the protocol Cryptocat builds that UI on is so bad that you conceded downthread that you're building a new protocol --- you made that concession in direct response to my point about mpOTR's inferior transcript consistency.

This is the problem. You're assuming that my mention of mpCat was a concession made in "direct response" to your point about mpOTR, whereas it's actually brought up as a tangent. The reason we're building a new protocol is to be able to subject it to formal security proofs, as mentioned prior. It doesn't have to do with the existing protocol being "bad" or not or its current integration into the UI.

Regarding my other implied statements, I think it would be better to stick to claims I am explicitly making instead of assuming implications on my part. That being said, I apologize and will try to be more clear in my future comments in order to avoid assumptions.

I'm also not sure why you keep bringing up mpOTR. As I mentioned in my other post that you refer to, we're not using it anywhere nor do we plan to. We're building a modified version which is far less bulky, etc.
If you check the history yourself, you'll see that everything the student contributed was deleted twice by the wikipedian. The contributions were not modified, simply everything completely removed.
Not all our work, but we definitely use code sketched out on whiteboards as a communication tool. Are you claiming that you can't reason about algorithms or communicate them effectively if you're not in front of a computer?

I don't give a flying fuck about minor syntax errors, forgotten API, or anything a compiler can catch. If you forget an API, I either give it to you or ask you to make up something reasonable. (Chances are, I can't remember it either). But if you can't describe an algorithm to me in front of a whiteboard, I don't want you on my team. And if you can't translate it to pseudocode that resembles the language you're going to be working in, I also don't want you on my team.
Yeah. The more substantial downside is that Google effectively has remote root access to every device which holds decryption keys for that text. That's not exactly ideal.
I use (and created) the Passable Google Chrome extension: https://chrome.google.com/webstore/detail/passable/bpkpmidmf...

I also take advantage of any service that uses 2-factor auth and use HDE OTP on iOS
The Pleasure of Finding Things Out [video]
I think that a lot of your problems wont seem like such undertakings once you are recovered from being ill. For me when I dont feel right things seem far worse than they are.
Could you image being the person who spends 20 BTC for an exploit without any evidence that it's real? "But look, there's console output right there!"
a 236 kbyte C exploit code example - you defiantly get 'something' for your 20 BTC..
That's why God gave us a "Home" key.

Though Steve, who thought he was God, took it away from some of You.
Nuitka, a Python to C++ compiler
"I chose to only consider people who have at least one [GitHub] repo. You can be more liberal and look at everyone, but empirically profiles with 0 repos have been pretty useless."

"You’ll probably want to find the person’s LinkedIn to see where they work and how long they’ve been there ..."

This is just lazy recruiting for people who don't actually have contacts and can't use those contacts to find good candidates, so instead they use social networking as a surrogate indicator of actual talent.

Bleh.
Be the first PM hire at ZenPayroll (YC W12)
Check out Stripe.com

This is probably what you're looking for: https://wordpress.org/plugins/wp-stripe/
I take the second letter of each service, repeat it a bunch of times, and then concatenate that with something else which is the same every time. So every password is different and also complex enough.
Wow, six languages. What languages do you speak, and how did you learn them?
"If you made antibiotics something you can't get outside of an isolation ward. If we stopped using them on farm animals, if we made everyone finish their meds (rather than sending them home to maybe do it and maybe not), if we burned the bodies when we failed and sterilised the rooms...."

Of course all of that is radically better (in the narrow sense of decreasing the rise of resistant bacteria) than what we're doing today, but it's still not any sort of a guarantee. When you treat someone with antibiotics, you're necessarily exposing everything that's in 'em, and you're necessarily not wiping out everything that's in 'em, and bacteria trade genes.
I've been following Spacebox; what happened to plastic.io? Trademark conflict? (i.e. why change the name?)
IRIX-bloat mail (optimists get promoted) (1994)
I agree, but it's really theoretical:
If the user has write access to the chroot environment, she can just replace the binary or play tricks with the libraries. No way the (then not even run) binary can defend against that. Didn't try it, but I would guess that subverting crypto is /slightly/ easier if you can run your own code instead of just manipulating the random seeds.
> ~25X greater throughput than Google Protocol Buffers (GPB) with very low and predictable latency

Seems like it might take more than structure tweaking to overcome the quoted delta. I'd still like to see a general comparison too though, especially to Cap'n Proto on the one side and HDF5 on the other.
The CEO might not be to blame for the breach but he is responsible.

Personally, I think it's good that the CEO has lost his job over this. It's the sort of incident (along with the cost of Sony's breach[1]) that can be used as a cautionary tale pour encourager les autres to take security seriously.

1: http://www.zdnet.com/blog/btl/sonys-data-breach-costs-likely...
WHO commits to open access by joining Europe PubMed Central
A reporter, a reddit founder, a lawyer, and an ex-NSA chief walk into a debate
POST-based searches are rather inconvenient, as there's no easy way of saving the search page. As far as I'm aware, referer headers are still sent to HTTPS links, even if the origin differs. So https://duckduckgo.com would still send referers to https://example.com.

But if you still don't want your clicks going through the r.duckduckgo.com domain, you can turn it off in the settings.

Presumably you also disable Javascript by default, right?
| 236kb of exploit source, must be written for enterprise.
It seems that once again, running services on non-standard ports where possible might have payed off.

Off to patching. Or rather, wait for eventual patches.

But you know what interests me the most about the whole thing? Theo de Raadts reaction. You know, after bashing OpenSSL heavily. And hinting at a SSH hole in FreeBSD, known to him but deliberately undisclosed.

Judging from the announcement's tested systems, it might be the exact hole he referred to. "...many more" sounds like they'd like to claim more successfully exploited platforms, but can't since they do something different, and the de facto reference implementation of OpenSSH on OpenBSD is suspiciously absent.
I suspect the story is even more complicated that many people think.

For example, this article is comparing Netflix to Google, in terms of how they are delivering content. It implies that because Google has (apparently) figured out how to serve content (and videos) to Comcast customers, that Netflix must be doing something wrong because they can't (or won't) do the same thing.

Well, here's the thing... if a Comcast customer can't access Google, then "the Internet is broken", and that customer is likely to call Comcast customer service. Which costs Comcast money.

Plus, Google provides a lot of services that don't directly compete with Comcast's own offerings. I don't think anyone would consider Youtube to be a suitable replacement for watching TV.

However, Netflix is competing directly with one of Comcast's major offerings (regular TV and video-on-demand too). In fact, that's really all they do. So Comcast doesn't have much financial incentive to help Netflix, and a lot of incentives not to.

Ditto all of that for Yahoo and the other major sites. The only one that might also be in this boat is Amazon. But if people can't shop on Amazon, that is almost another "the Internet is broken" situation.
https://blockchain.info/address/14PEL35LQf81oCvSPurhoyTSvosv...

> Total Received	0 BTC
Sounds like you learned a lot from the experience at the very least :)
How One Article Doubled Our ARR In 60 Days
Square open sources Viewfinder
Whois google.com
Watching the video it struck me that the lights embedded in the barriers between lanes are a really good idea. It provides illumination of the road and the barrier without large poles lining the road which block the view and are expensive.
I have an air and a t420 I've been planning on getting an x1 to replace the air. I've used the x1 and while the mouse pad feels extremely tacky to use I have a feeling its still going to work better and longer than the airs counterpart which is starting to do weird shit.

Lenovo often feels tacky if only because of their price constraints but what they offer for the price is usually an astonishingly solid build.

On the Linux compatibility side of things - most issues have work arounds on day one and full compat within a couple of months. I assume this is because of the heavy Linux following behind the think pad series.
I was testing whois on my linux box, and this is what I found. Can someone explain?
The original source code for Electropaint was released a few years ago: http://freeweb.siol.net/matevzb2/igl.html
In addition, is this search engine proprietary?
How To Use Ip Command In Linux