skysight-inc/HackerNews huggingface dataset:
If from the beginning users were trained to only login to Paypal if they're on paypal.com. Could be accomplished in this sort of transaction via a new popup window.

Of course, the horse is long out of the barn on this.
Looks to be using Google's Keyword tool to get related keywords (or possible latent semantic index scraping).

Two issues I've found after using it twice:

* It returns exact-match like domains, those got decimated in October 2012. (low quality content on exact match domains), and they are proving more difficult to rank related to "keyword over-optimisation" because the keyword already appears in the domain name. Creating content trying not not to overrepeat that keyword in the slug, or path, or content is awkward and unnatural. Better instead to go for a brandable domain rather than a colourless exact match domain

* The suggestions don't take into account trademarks and existing company names. So making domain suggestions of WalmartStock.TLD and WalmartLocations.TLD, and even Walmart.bix is treading in murky territory.
Building an Inter-University Private Cloud with Open Source ownCloud
Are you seriously suggesting that people should go buy a bunch of junk from the organic food shops just in case one of them turns out to be good for you in the future?

Adversely, what happens if one of them turns out to be a carcinogen or otherwise something that adversely affects health?

Your mom isn't wise, she just threw enough unproven stuff down her kid's throats so that it was inevitable that one of them one day might prove useful. I wonder how many damaging things (or potentially damaging) you also consumed?
I used to work at PayPal (6+ years ago), specifically in Merchant Technical Support. Speaking strictly for myself, I hated IPNs too, and having come from another payment gateway with a similarly unreliable out-of-band notification system, I was always mystified as to why folks would build whole fulfillment systems around them.

I mean, I know the API-based product is more expensive, but this is your business, right? If you have any kind of significant volume, I would think the reliability of straight API calls would make the additional cost well worth it.
That's good to know -- thanks for clarifying that this is a real security concern.
Here's the list of what's new since version 9 of Mathematica:

http://www.wolfram.com/mathematica/new-in-10/
I think you are confusing me with wuliwong...
That's taking the "pets" vs "cattle" meme a bit literally. Memorable hostnames can be given to both pets and cattle.

However, I personally question the wisdom of giving a network intruder a roadmap to your internal network via easily predicted DNS names, but that's probably just me being paranoid.
There are already systems in place to weed out duplicate posts/links.

The NSA news has "flooded the site and completely dominated the front page" because there is a flood of news.
Both of those were prime motivations for me when I created my Luculent font [0]. If you haven't seen it already it might be worth a try.

[0] http://www.eastfarthing.com/luculent/
This is Pedro, one of the developers at Braintree who worked on this product. Security is our top priority which is why we will show a pop-up window hosted on a PayPal domain in the environments that support it. We are incrementally rolling this feature out. Here's more info about this particular issue: https://developers.braintreepayments.com/javascript+ruby/sdk...
Yeah, or re.split(r'\s+', ...), or something - the issue here is that you need to know about this.

From the comment a few levels up I understood that the code which used the str.split with " " argument didn't signify that someone who written it knew about its semantics. If he did and it was really what was intended then ofc it's completely ok, but if not, it can easily lead to bugs.

For example, if the user is required to input several ints separated with whitespace, this:

map(int, input_str.split())

will rise only in expected cases, while this:

map(int, input_str.split(" "))

can lead to rejecting correct input just because someone pressed space twice. It's very frustrating for the user, too, because whitespace are hard to spot visually.

So, I don't know if this qualifies as antipattern, but I think if I saw .split(" ") instead of .split() in the code I'd at the very least expect the comment explaining why it's used.
Well, worst case scenario is the (very rare) chance of getting contaminated product through international spice adulteration and counterfeiting - and that contamination giving you some unpleasant food poisoning that gives you kidney disease leading you to either need a transplant or to live on dialysis for years.

I just did a web search for contaminated spoces and there are some recent US cases of imported turmeric that was high in lead. So worst case is that you very slowly give yourself lead poisoning.
It's new. It's similar to what they already do. It isn't trivial like cat pictures or boring like databases. It's obviously going to be very important. It is believed to involve math. It can be about almost anything, including things people talk about at cocktail parties. Because it is new, it is not necessarily about anything in particular.

And it has been talked up for years by attractive, articulate, impressively credentialed and well to do people who seem to be getting everything they want out of life.

http://www.hilarymason.com/about/
"Short" is relative. 4 billion IDs is likely Unique within an organization, even one the size of IBM, Google or Microsoft.
"Explicit is better than implicit."

If you mean is not None, you should say is not None.

It's fast and readable and there are no "just be aware that" disclaimers to tack on afterwards.
Working as a Team – Designers vs. Developers
It's pretty common in penny stocks. It's usually a scam to say "this stock has jumped 4000% in the last 12 hours!". Very commonly, the owner of the company puts a bunch of money in to inflate the stock, waits for others to continue inflating the stock, then sells it all for a quick profit.
Not sure your comment is intended on proving a con of naming servers as random strings, but honestly I would consider that a positive. If hostnames are actual words, then people are able (and sometimes incentivized) to transmit them verbally. This can lead to communication issues.

If the hostname is randomized, then the logical thing would be to copy and paste the hostname and send it off over the wire, which would theoretically cut down on human error.
I enjoy plenty of 'me' time and found the comments about seeing a movie alone interesting - I don't mind at all being solo when I see a movie.
Comparing the time it takes to create a web app using Rails 4 and Django 1.7
I don't control HN, so you don't need to convince me. It's not uncommon, and the NSA isn't the only topic like this. Check that link that you and I both posted.
> There's a reason why we're not allowed to have encrypted landlines.

We can, it just requires that end users manage the keys if they don't want them turned over to the government by a third party (eg, the telephone company).
What happens if the book is lost in transit? Isn't that worse than "forget them forever when I leave it in a dusty box somewhere"?
I'm sorry but this:

> HN is a happy place, and politics are anything but happy.

makes me want to puke a little. I think you are probably right though, I can sense a major demographic on this site who are eager to ignore controversial issues. As I said earlier, maybe it's time to move on, but to where I am not sure.
Awesome, can't wait to try the new features and especially support for high resolution displays.
Don't forget Google as the ISP (Fiber).
Startup gets freelancers empowered through legal search
In the case study, http://www.dominoup.com/buzz.html, you have an orphaned sentence:

Second, it centralizes the storage of project data, enabling.

And the next sentence should be And third, not And second:

And second, Domino automatically
This doesn't hold up for a number of reasons.

First, the client should be actively and asynchronously working on the puzzle when the page loads, so when the submit button is pressed, the puzzle is solved, and ready to be submitted to the server. Asynchronous JavaScript has already been solved. Even for a Raspberry Pi, a 16-byte Hashcash puzzle can likely be solved before the user has finished typing in the form.

Second, the point of Hashcash is to stop spammers from mass POST attempts. Form spammers rely on bots, without JavaScript, to mass POST to forms, millions of times per day. As soon as JavaScript is required, this immediately stops 90% of the bots in use, right now. Of course, they'll adapt, with JavaScript VM bots if Hashcash is the norm, which then ties up the client solving the puzzle. The longer the client is tied up, the less it can spam in a given amount of time. It _drastically_ slows down the amount of comments a spammer or zombie network can perform. As computing gets more powerful, the Hashcash minting size can be increased, to continue tying up the bots. "Blowing through them" couldn't be a bigger exaggeration and further from the truth.

Third, properly implemented Hashcash is designed to prevent double spending. So, once the token is spent, it cannot be spent again. Even better implementations will not allow tokens that have not been minted within a certain timeframe, such as 24 hours. The Hashcash specification has the timestamp as part of the token. This discourages mining the tokens early, for spending later.

Lastly, captchas have shown to be entirely ineffective against bots. Do a search for beating captchas, and you'll see the sad state of affairs. Captchas are getting harder for humans to interpret, because bots are getting better at OCR, and defeating them, with increasing reliability. In every instance I've deployed Hashcash into a web form, I have yet to see spam come through. In one site, as of the time of this writing, Hashcash is solely responsible for blocking 670,624 spam POST attempts in a 10 year run.

The big drawback, is forcing JavaScript to be enabled, in able to POST to a form. From what I've seen on the virtual web hosts I administer, it seems to be about 10% of the web traffic has JavaScript disabled, on average. This might be acceptable, and it might not.
6 Funding Options for Young Businesses
A lot of budding entrepreneurs have asked us how they can raise capital for their new businesses. The answer is it's extremely hard . Even if you are a tech startup with a hot idea and amazing growth potential, it's still really hard to raise funds from investors who don't know you when you don't have much to show for your company. After all, 8 out of 10 entrepreneurs who start businesses fail within the first 18 months. Investors/Lenders rarely fund companies at this stage — however, there are other options.

The following are 6 viable ways to fund young businesses. Keep in mind these options are still hard — they either require a lot of time investment or have very high cost. We recommend that you write up a solid business plan before you start fundraising. You might also want to consider the following options in tandem with 1) waiting for some time until you save up the capital or 2) starting small with minimal costs.

Continue to read here
https://www.fundastic.com/posts/59-5-funding-options-for-young-businesses
<insert snarky bitcoin comment here>
To me, automatic Maybe inference seems correct. I don't think the concerns about types being broken (when one makes `u` total) are valid. That's really the point of a strong type system. You get the errors at compile time and they show you that the semantics of your program are inconsistent. My only issue with it is that it's a little too "magical". I'd rather that the behavior of record functions be more explicit. That makes lenses seem more attractive, as you mentioned.
I don't know if you did this intentionally, but what you just wrote is a great example of what the quote is referring to. You've decided that since they're not literally dying from starvation then they deserve no sympathy and no help.

I for one would prefer to live in a world where poverty of the sort seen in your picture doesn't exist. Part of achieving that is being willing to help out others when they hit hard times but aren't necessarily on the verge of death. Raising the standard of living means just that: it means raising the base expectation of what life as a human being entails. When someone faces trouble and falls below that base expectation, others jump in to help.

The worst sin this couple did, as far as I can tell, is they bought some root beer with food stamps and didn't sell a car which they very much needed for reliable transportation. They used the government help when they needed it, then regained employment and are once again self-sufficient. This is exactly what these social services are for.

Let's suppose they got no help at all, like you seem to think would have been fair. They probably would have had to sell the car in order to feed their children (and themselves). They would have soon lost all modes of personal transportation, in fact, because their Honda broke down (and are you going to spend cash to repair it when you need every dime you have for food?). Therefore, they would have relied almost entirely on public transportation. The difficulty of finding new employment just doubled, meaning that the length of time they face poverty probably also just doubled.

But selling that car didn't fix the fundamental mathematical problem of "income < expenses." It only provided temporary capital at the expense of personal transportation and probably employment, meaning it actually exacerbated the real problem, which is increasing income rather than immediate cash reserves.

Oh, and by the way, back when they were making $120k, and now again that they have decent income again, they were (and now are again) paying so that others can receive the same help in similar situations.
The picture in the article shows "NSA", "CIA" and "FBI" listed for various cases in the "Responsible Agency" column. The cases that were highlighted in this article all had FBI listed as the responsible agency.
I think the argument is the "penalty" applied to posts related to the NSA, is a little overbearing and is suppressing posts that shouldn't be (ie. unique posts with new information).

Such as:

AMA: G. Greenwald on the Muslim-American leaders spied on by NSA and FBI (reddit.com)

https://news.ycombinator.com/item?id=8009696
Braintree is a division of PayPal.
Actual words are better for all environments; abbreviations are ridiculous. They don't speed anything up, they slow down comprehension and they make jargon where none is warranted.

The words you speak should be the words you use, not abbreviations of them. You don't say prd, you say prod, you don't say tst, you say test, so prod and test are what you should use. One ubiquitous language everyone can share without the burden of useless jargon. Dropping out vowels isn't saving you anything.
The author says that different data stores are good at different things, so we need to use multiple data stores in our application. He proposes that a data service layer can abstract these implementations, making it easier to swap out data stores as needed. I think that's a good idea. Separating our applications from data store specifics is a big reason why we use ORMs and ODMs today.

However, I think there are challenges with this polygot data store architecture that he doesn't address. Each addition requires due diligence to understand its CAP trade-offs (which the author mentions briefly), scalability and performance characteristics, how to configure, etc. These are non-trivial concerns even for a single database. It's important to consider these challenges when building out a data store or data service.

I'd propose an architecture where the data services layer itself exposes different data models to the application, all of which are persisted in a single data store. Given that many data stores use a key-value store under the covers anyway, translating the specific data model down to a single, persistent data store would simplify operations while exposing the desired data model to the application. (As a caveat, this multi-model approach requires ACID transactions to ensure strict consistency when translating between data models.) This approach provides operational simplicity with just one data store and application efficiency by exposing the "right" data model API.

Full disclosure: I'm an engineer at FoundationDB, a database that provides ACID-compliant polygot data models on a single key-value data store (http://www.foundationdb.com).
Look at that thread; it's shockingly bad, almost a perfect illustration of the problem of political threads on HN.

In particular: look for the (prominent!) long-form anti-Islam comments. Notice how some of them aren't illegible light grey --- despite large numbers of downvotes, they sustained enough upvotes to stay viable on the thread!
Paypal has great customer support if you are a consumer, it is only sellers that have issues. And usually it is because someone thinks it is a good idea to use Paypal as a donation processor (which it is NOT meant for) and are surprised when they get into trouble.
Looks by Dr. Dre
I'm a bit confused by some of the replies - you're talking about proportional fonts for a text editor to view fonts. Using a monospace font makes this easy; using a proportional font makes this very hard.

How would an editor know what to align? It's not part of syntax highlighting - unless you define your own rules.

The fact that this is not available in Vim nor emacs (I haven't checked; maybe it is) would show that it really is a rare want.
I doubt that cinnamon is cheaper than sodium benzoate.
The author never pays off the answer to the initial question- is it a fat cylinder or a skinny one? We know it has height ~1.15R (where R is sphere's radius), but this is not easy to visualize.
"Even if the user doesn't swap out their browser you don't know what you might get."

My point exactly.
Why you can't use YCSB to measure MongoDB, by Thumbtack Technology
Not, perhaps, a little concerned with the naming conflict with IBM (formerly Lotus) Domino? At version 9, it's not dead yet (despite rumours to the contrary going back to R4.5).
Cosmic Mystery Solved by Supersized Supernova Dust
Why not just submit the link?
Chargify + Braintree + PayPal = Pay with PayPal
This just reinforces the fact that you shouldn't just blindly trust what your professors tell you ;-).
I think we should define 'being lonely' better. At age of internet, computer games and social network it is very relative. Perhaps better term is 'distraction free environment'.
As someone who deeply appreciates the work 'dang is doing trying to maintain civility on the site and thinks the site is drastically better now that moderation has a public face and improved transparency: maybe you can find a better way to discuss what he's doing than saying "get a grip". Reading horrible, mean-spirited comments day-in and day-out must be the shittiest part of that job. I can't fathom a reason why anyone would want to make the job shittier.
I would NOT trust any US company holding a root certificate. Just because of the patriot act. So no thank you. Giving that power to very little actors is a very bad idea and security should not rely on few actors.

We should just be able to revoke certificates more easily.
Don't forget examine.com:

http://examine.com/supplements/Cinnamon/
It from 2008 - before Google stopped asking those sorts of questions when they determined that they were no good at predicting how the employee would actually perform.
Software Testing of Machine Learning Applications [pdf]
That would be good statistic for them to list: "1 out of every XX,XXX gets lost in transit". They might use a priority shipping method and pre-addressed box to help prevent that kind of incident.

I personally don't really have a use for the service. A document scanner allows me to use whatever paper I want and scan whatever I want.

It is an interesting idea though if there is a market for this type of service.

I was trying to think of a way to embed a scanner into the front cover of a notebook (with replaceable pages) but it just didn't seem practical, a flatbed or feed scanner works about as good as you're going to get.

Plus, these days you can just take a picture with your phone and be done with it. I do that for whiteboards for content I want to save before erasing them.
Cloud Foundry and the Design of the Philips Digital Health Platform
"Unique posts with new information" is not the standard of relevance on a startup news site. Lots of things that are interesting but not startup-related make it into the list, but it wouldn't be appropriate for the front page to be full of NSA stories even if there's a "flood of news". This isn't CNN.com.
I had a somewhat snarky answer earlier.

I'd say it's much more likely the pre-configured docker digital ocean makes available is on hardware that isn't as heavily used as a regular old postgress configuration.

That is, there's more load in general on the postgress machine rather than the docker machine, you don't get perfect isolation in those environments.
Show HN: MechanicalSoup, Python library for automating interaction with websites
Good point. Was too used to reddit.
Well yes, my point is not to use an iframe like this (unless browsers start to include their own URL bars for those, though that still seems like a terrible idea). Previously paypal opened a regular popup (an entirely new window with its own url bar) or simply redirected the page. Both of those will fully inform the user about what site they are filling their credentials into.
HN isn't suppressing these stories; they're getting flagged off the site by users. (The mod has been at pains to point this out over and over again as NSA stories fall off the front page and people complain).
Love Sex
Sex girL
Interesting. I understand that popups might not be supported in certain environments, but it would seem the preferable flow in that case would be to forward to Paypal, authorize, then forward back. I just don't see any way to protect a lightbox from phishing, even if that's only on a subset of devices.

I guess I'm not up on the limitations of mobile browsers, but if they really make it so hard to expose the URL, it would seem to re-open a huge array of phishing attacks (and, once these are heavily exploited, mobile browsers will probably get better about exposing URLs.)
Question, how do you over multiple long lists (in python 2) especially if zip itself takes a long time to zip them, for example.
Hey, we can use actually data for this!

http://www.alibaba.com/showroom/price-of-sodium-benzoate.htm...
http://www.alibaba.com/showroom/cinnamon-price.html

Looks like the prices are surprisingly similar, though cinnamon is, if anything, more expensive. Additionally, I'd imagine that if sodium benzoate is the active ingredient, you'd need less of it to get the job done.
The Hermit Kingdom: An Inside View Of North Korea's Hidden Car Culture
Something to it, as in it prevented your childhood-onset parkinsons?
Comment: There are thousands of guides, HOWTOs, forums, mailing lists, etc out there to teach you how to set up basic tools in Linux. To me this doesn't constitute being a sysadmin and is only a small part of the job.

It would be really neat if you interviewed a bunch of sysadmins with long resumes, maybe people who give talks at LISA, NANOG, etc. People from different industries probably have vastly different work environments. Ask them if they have any noteworthy experiences, lessons learned, or tips that work towards developing the career versus just Linux-literacy. There's a lot of knowledge out there that isn't written down anywhere.
Do you check ips against the blockchain for the novelty of it, or is there another reason?