skysight-inc/HackerNews huggingface dataset:
I have to say that's fairly surprising to me - all of our clients, both from the US and from other places, pay with bank transfers. I've never seen anyone suggest using PayPal or a credit card, and I would find it surprising to make payments of 10s of thousands of dollars that way.

But as you said, that's just been my experience, I guess there are other ways of doing things.
Maybe not everyone knows this, it's called XSS. There is a good cheat sheet to protect against issues like this from OWASP :
https://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_P...

Shameless plug: We develop a tool that detects vulnerabilities such as this automatically (even in JavaScript based web apps) - https://www.netsparker.com/netsparker/

There is also a free community edition which would possibly detect this vulnerability :
https://www.netsparker.com/communityedition/
Yes and no. You can run a profitable criminal enterprise just by doing the other half - buy high-value goods in the US, smuggle them into Europe, sell them there for a profit.
Fabien Potencier – My Take on PHP [video]
Consider guns or even certain fireworks. There are things that are dangerous that can be done by the foolish, the laws for regulating these are well motivated.
YMMV but opening a US bank account as a UK citizen is easy as long as you're present on US soil.

Opened a checking account at a Chase branch in San Francisco with my passport and as many other proofs of address as I could muster. Everything gets delivered to my UK address.
A very brief history of Greek diglossia
I got angry at this because it "didn't work". I simply didn't read you only have to light up the blue tiles. Maybe i have to go back to reading lessons...
Try getting FDA approval for this and see what happens.
Join us at Ember Fest in Barcelona August 26-29th
Background: I'm a UK freelancer working with UK, EU, US and RotW clients.

Per other commenters, my UK and EU clients are usually happy to pay by bank transfer. My invoices include UK payment details, along with IBAN and SWIFT details. I am also starting to include Paypal details to go with the path of least resistance.

Now, US clients tend to pay via Paypal or US check. In the past I've used brokers like AuctionChex[1], and also used a USD deposit account with CITI[2].

AuctionChex went out of favour with me when their exchange rates went into free fall for no obvious reason, and CITI screwed me for fees after a mistake at their end. I no longer use either.

With the CITI USD account, it is possible to have it fee-free if you're careful: if you have a current account and 2 standing orders set up, hold a certain balance and you transfer in a given amount per month, there is no fee for either the current account or the USD account.

Now, I take the hit on USD checks and use my business bank (NatWest) account for it. They charge a set-fee to process the cheque, around 10GBP for the value I deposit, and I just mark it on my accounts as a bank charge. My accountant is happy, and there are no shady brokers in the equation.

[1] http://auctionchex.com
[2] http://www.citibank.co.uk/personal/banking/international/eur...
The frontpage describes what it actually supports:

http://gwan.ch/

Interestingly they do not provide a windows version of the server, citing it being slower than the nix one, which entirely ignores that quite a few people develop on windows and deploy to nix.

Edit: Oh wow.

http://gwan.ch/insurance : "To Secure your Investment on G-WAN... ...Buy G-WAN's Source Code!"
"GWAN isn't designed to be a robust webserver, it's designed to perform exceptionally well in contrived and outlandish benchmarks [...]"

from http://tomoconnor.eu/blogish/gwan-snakeoil-beware/
Berkeley Researchers Detect Smallest Force Ever Measured
Volatility is scary! And the user experiences of most Bitcoin-related tools leave a lot to be desired. Both are temporary problems.
How about Ctrl-D as well. Probably makes a bit more sense.
In France that seems to have been the case until recently, but not any longer:

> New drug regulations in France: what are the
impacts on market access?

"Cost-effectiveness studies will now be part of the market access requirements for all drugs in order to satisfy the selection criteria for medico-economic assessment."

...

"Conclusion: In light of these changes, it clearly appears that the access to the French drug market will be increasingly driven by data pertaining to comparative-effectiveness and cost-effectiveness, and an increased role of postmarketing studies in the years to come."

http://www.jmahp.net/index.php/jmahp/article/download/20891/...

> Countries that ensure universal access to approved drugs generally keep costs down by the negotiation power of a government-backed monopsony combined with the threat of compulsory licensing should demands be excessive

Putting compulsory licensing aside, which does not happen in many countries, I don't think this contradicts the poster above - a government agency makes a judgement about the cost-effectiveness of a particular drug, and they either decide to buy or not to buy depending on whether the price is above or below that limit.
Three levels of enthusiasm for technology
Stripe charges closer to 5% when processing USD credit card charges, as it says on the website.
Posted my reply on wrong comment (Got confused between akkartik and tekknolagi) :). Anyways, thanks for sharing.
Are you planning to add memory management opcodes (Allocate memory, free memory)? I see DBS, DBG instruction, but it is like key-value store (since it uses carp_ht internally).
The Ultime Provocative Necklace
Why your washing machine is a security risk
When you say "the format of the data should be self-evident", do you mean that Camlistore converts images and videos to simpler formats? I mean, JPEG is everywhere now, but fifty years from now, who knows? Maybe we should save them in PPM.
I’ve always insisted on wire transfers to my (originally Australian, now Thai) bank account.

I looked at PayPal once (as I was asked by a US client if they could pay that way) and basically it seemed like it was only financially effective for small invoices. As soon as it went over $1K the “fixed price” of a wire transfer worked out better than a percentage based fee structure like Paypal.
Introducing the Boxcryptor for Android Encryption Interface
Technically you are supposed to pay import tax into EU when the item is brand new, even if you bring it with you. And then the price difference between US and EU is not in your favour.
Become an author (is free) on gTLD.club
All three options (bank transfer, CC & Paypal) are presented on the invoice — so this hasn't been through client request but through client preference. I'd actually prefer bank transfer since it usually works out slightly cheaper. But not enough to care about ;-)
Very interesting, and - entertaining. I've had a feeling something was off, looking at the website. If something is too good to be true, it probably is.
I don't think you can get tax refund when you leave U.S. Those are mostly an European thing.
Yep. Moving a place like San Francisco or Berlin might not be required for the "actual work", but it certainly provides other benefits in available services, cultural activities, etc.
From what I can tell, that $84,000 is just the cost of the Sovaldi pills alone.[1] You still have to take it with interferon and ribavirin just like in the traditional treatment - for 12 or 24 weeks rather than the 24 or 48 required without Sovaldi, but that's still going to cost a fairly substantial amount on top of the $84,000 cost of the Sovaldi.

[1] See eg http://www.nytimes.com/2013/12/07/business/fda-approves-pill...
good point, this should be what BT is made for (or at least a very good use case) and yet, no mention.
The money for drug development would come from the same budgets that currently pay for drug purchases - the manufacturing expenses are only a small fraction of what they pay now, and the remainder of those budgets should get shifted to R&D.

Medicare alone spends something like $50B per year on drugs, add also Medicaid and other agencies (VA and such), and there you have an ability to invest comparable numbers as the pharma companies do currently.
Domain name suggestions for a web dev blog
Hey!
I already have a blog about web dev and I would like to change the domain because it started as an experiment and now is expiring and I don't like it. So here is what I will talk about, and based on that I'm kindly asking you for any suggestions (you don't need to check if domain is available, I will do that, so just shut what it comes to your mind).

What I have write and will write about (TL;DR; Full Stack Developer + Games):

- Tools:
- Sublime Text;
- SO tricks;
- Automatization;
- Git;
- Client side:
- Design, psychology and social integration;
- Build tools: grunt, yeoman;
- CSS: Compass/SCSS;
- Javascript: React, require.js, architecture, patterns, code organization, backbone...
- Profile and optimization;
- Games:
- Phaser, canvas, webgl;
- Profile and optimization;
- Server side:
- Node.js;
- Deploy: docker, ec2, nginx;
- Unix: commands and beginner tuts;
- DB: Mongodb and mongoose;
- Organization and folder structure;
- Crawlers;
- Algorithms;
- Reviews about apps I've built and what I've learnt. Why I've done certain decistions; Optimizations.;

I like words like those:

- Forward, next, future, light: because I'm pushing the limits of web developement and I'm trying to find to improve the tools and the development techniques;
- Power: I don't really know (:

You can already see here what I've wrote: http://webdesignporto.com/

Thanks (:
well one is not supposed to keep bitcoins in your wallet in this case; just use it to transfer the funds between the two peers.
The Insidiousness of Facebook Messenger's Mobile App Terms of Service
I still disagree. Look at how the words are used in a formal context in English and in French: in English you say "Death Certificate" for the document recording the death and events leading to the person, but in French it translates to "Certificat de Deces", and certainly not "Certificat de Mort" - people would be laughing at such a translation in that particular context, hence the reason why I think the French translation in this particular context is inappropriate.
That article then proceeds to say absolutely nothing about its performance.
Yes, that is a fair comment. It really does need a better README, and some comments in the code.
As a private user, the best solution I found was to go through BTSync set on a limited set of document folders.

It doesn't need to forward ports or expose the login system. The BTSync server is still a vulnerability, but it's under it's own user and should give less exposure than the other services like the DSFile that check the login/password. Potential damages on a simple breach (i.e. the sharing key leaked or was guessed) should be limited to the shared folders. I hope.
Wearable users tracked with Raspberry Pi
How to Manage Talented People by Not Bossing Them Around
My bank charges 7 EUR (~10 USD) for a wire transfer to any US bank; it would be expensive for small purchases, but not significant for a freelancing project payment.
This article seems to single out an odd outlier. Sure there are super expensive drugs like these but on average major components of health care is not drugs but hospital and doctor's fees. My 1 hour visit to emergency room costs $2500 in which single injection was administered that was under $100. Rest of the charges were simply for "services" provided by hospital. I once calculated average hourly charge for doctors using other examples I was aware of and it came out to around $1000 for every hour per doctor spends with you plus $100 for each nurse for each hour they have to attend you. Price component for drugs on average is negligible in most ordinary treatments.

The problem with US health care is invisible for-profit conglomerates that controls and owns major health care facilities across the country. There ridiculous charges works because consumers don't care because they don't pay out of pocket majority of expense in lot of cases. So all these conglomerates have to do is to make sure laws allow them to charge 3X-4X fees like above to have amazing margins.

One way to solve this issue in US is to promote non-profits to operate health care facilities. This can be done by government subsidies and grants in the same way they are provided to universities and research community. There are 200 major cities in US. If we want to build 2 great non-profit hospitals in each cities, it would cost 2 X 200 X 0.5 = $200 billion even at the higher end. If we spread this out to 5 years, it's less than $50 billion per year - drop in the bucket for current health care bugets. These hospitals can then charge 2X-3X lower amounts to drive the price down. Without introducing non-profit competition to for-profit organization we are in same situation where operating systems are controlled by one commercial company and there are no open source alternatives resulting in redicluously high prices and stagnated innovation.
Dystopian predictions and their realisations timeline
> And of course, every few years an expensive option is made available for a year or so because some politician's daughter happens to have it.

Has this ever actually happened? This reads like a caricature. The decisions about cost-effectiveness in Britain are made by the National Institute for Clinical Excellence, which has a very strong reputation for rigor and independence.
Ask HN: Did you buy ethereum? Why?
Project link: ethereum.org
CyberESI are using a conflict to push to media outlets their old 'news' from 2011, which even then weren't that interesting...
Yeah. we have future plans and funds to drive this community actively.
more detail from krebs here:

http://krebsonsecurity.com/2014/07/hackers-plundered-israeli...
Psychic Christopher Golden
Booking.com - Developers / Data Scientists - Amsterdam - relocation and visa sponsored

Booking.com is always on the lookout for good developers and data scientist, working on-site in the center of Amsterdam.

In development, we use Perl for almost everything with a MySQL backend and Git for development. You don't have to know Perl in advance to get hired, if you're a good developer and willing to learn, we'll teach you Perl in no time. We get our changes out really fast, it's rare for your code not to be on our live systems within hours of you pushing it.

A Data Scientist at Booking.com will help steer the improvements of our products, give strategy perspective to our teams, and provide business understanding to the organization based on your data analysis.

We are very data driven and have a clear goal: helping our customers. Everything we do is aimed at solving problems for our customers, if it doesn't help our customers we're not interested in doing it.

We have people from all over the world relocating to work with us and are very well set up to handle relocation and visa issues, most of the people working in IT are expats so we've got a lot of experience with bringing people in.

I'd be happy to answer any questions at jan.bernhart@booking.com and/or forward your resume.

For more info check http://goo.gl/kg24R4
> The real reason why European countries (and Canada) pay less is because they legislate discounts. They give the drug companies no other options. I would call it arm-twisting more than negotiating.

What do you mean by 'legislate discounts'. As far as I'm aware, most European countries do not get involved with compulsory licensing, which is what it seems you're referring to.

I suspect the difference is more about public relations - an insurance company does not want to get in the news for turning down a particular treatment, because people will move to another company. With a public system, you are spending taxpayer money, so there's more of an acceptance of a balance between cost and benefit, and therefore the buyer has some credibility when they say they will not pay above the level of cost-effectiveness.
Small St. espresso is worth a look, although I'm not sure it would be that good for working from for a long time - but it depends on what you are working on.
Usablilty of old Nokia N9 alarm clock
I am currently running FreeNAS for my home storage, was is it that you are missing?

I used to run as simple Ubuntu server with NFS, but realised I just want the simplicity of a web interface over doing it over ssh.
whilst performance does look staggeringly good, it is entirely negated by the pitiful rationalisations made against not being open source. given everything that's happened regarding privacy recently, why on earth should anyone trust their binaries?

it might fly in the world of Windows, but i can't see this becoming a thing on Linux.
I had no idea what a control group is, so here is a short summary for others in my position:

- cgroups (abbreviated from control groups) is a Linux kernel feature to limit, account, and isolate resource usage (CPU, memory, disk I/O, etc.) of process groups.

- Various projects are using cgroups as their basis, including Docker

http://en.wikipedia.org/wiki/Cgroups
Nice. Does it do any encoding conversion, e.g. latin1 to utf-8? Does Tika do that?
The Camlistore storage format is self evident, however, most blobs you put in Camlistore are not. Maybe you can reverse engineer the Matroska container you keep your movies in, but can you reverse engineer h.264?

Even jpeg would be very hard to reverse engineer.

Presumably you can add instructions, or even source code, for decoding pictures, sounds and movies. But then you get into technical problems and there's no guarantee the average grand-grand-children of the future will have the skill or time to use these information.
Microscopy is also the limiting factor in _developed_ areas when it comes to urinalysis which I'm sure this solution can easily be adapted for.
It's a great idea. Only suggestion would be to make it easier to add cities and places and let the community report bad places, instead of what seems to be a review-first approach. I'd rather more content (and the ability to add content for my locals right away) than have to go through a "beta" phase to get the city up and running.
This comment is helpful:
https://news.ycombinator.com/item?id=4110471

it seems to do what it says
> ... I do believe it more closely
> follows the principle of least
> astonishment.

I would be more surprised to find that something I type
in a textarea has its line-feeds preserved as it gets
converted from the text I type into HTML.

> If I go through the trouble of posting
> three lines, but only one line appears,
> then the result doesn't match what I
> intended to convey - it is as if I
> posted an entirely run-on paragraph
> either way.

Which is what happens when HTML is rendered to a screen.
The line-feeds in the HTML are not preserved.

We have different expectations. The existing behavior
matches my expectations, and it does not match yours.
I have found you an explanation, but I expect you will
never agree with me about what's "natural" because we
have different beliefs about what "should" happen.

<fx: shrug />

It is what it is, and it won't change. You will disagree
with the rationale and "naturalness," but perhaps the fact
that others exist with different expectations may help you
accept that it does not and will not do what you thought
was obviously "right."

I'm not, by the way, claiming that its behavior is more
"right" than what you expect. I'm merely pointing out
that not everyone has the same expectations as yours.
Try it on Android :)

Google Play: https://play.google.com/store/apps/details?id=com.planemo.sq...
Why should documentation handed over to the Feds be subject to a FOIA? It is still private information of the individuals submitting it. As in, its not the government's to disclose.

Honestly if that is all it took to lose your rights to privacy people would be up in arms. The FOIA should be able to tell you who they are requesting information from and what type, it should not necessarily make that information public. I do think that if it results in criminal prosecution it can be revealed after all court cases have been resolved.
There were valid mentions about the many purchasing businesses who are unable to pay in Paypal due to their procurement bureaucracy rules. I seriously doubt that they'd able to pay in Bitcoin as well.

Otherwise, Bitcoin may be an okay option for the receiver; maybe a bit of a hassle to do proper accounting/taxes. Locally, I see options to 'cash out' BTC that will cost me something like 2.5% due to buy/sell spread - not the cheapest option but similar to accepting the same amount from a credit card.

I'd personally prefer good wire transfers, though - if worldwide transfers would be more similar to EU-wide bank transfers, then that'd be better than Bitcoin for freelance invoicing.
"Balance of costs and expected benefits" is definitely more accurate. For example, if the claims for this drug are accurate, I'd be surprised if it didn't make the cut because it has some pretty clear long-term benefits. The treatments you hear about the NHS not funding are generally ones which are both expensive and not terribly effective.
>> endlessly long lines in a browser text area

> I don't understand. Text wraps automatically
> inside a textarea without any newlines, ...

That depends. Once upon a time not all browsers had the
feature of auto-wrapping text in a TEXTAREA element, and
many people grew up with the habit of putting line-feeds
into their text as a matter of course. It made the text
readable as it was typed, and avoided the problems caused
by some browsers deliberately inserting CR or LF into long
text lines.

For many, the habit persists, and for me (for example) it
would be extremely annoying to have CR or LF from the text
preserved as it gets converted into HTML.
And this is why most companies would rather treat a disease then cure it.

It has been so long since a disease has been cured that the current american system isn't designed to handle it.

I have to say the European state sponsored medicare looks way superior from this point of view.

They are not worried about the high upfront cost since every citizen is paying taxes for that.

Plus they can drive prices down since if the government buys from you you make a lot of money if it doesn't you have to sell it a lot cheaper for regular people to buy it with their own money.

It's not perfect it's open to manipulation however it's better that anything a dynamic corporate sector could offer.
Proofs of address - meaning proof of your UK address or some USA address?

"present on US soil" is a very big IF, the whole point of remote freelancing is to avoid the expenses/visa issues/etc and not be present on US soil.
What makes you think that the bloat in the US is a product of market inefficiencies and not government inefficiencies?
> Of course, the US is doing God's work, by overpaying for drugs. This effectively subsidises drug research, and allows all the more socialist countries to freeload.

Another way of looking at it is that the government is paying what the drug is worth, and no more, alongside banning direct-to-consumer advertising, and heavily restricting marketing to doctors, and is therefore setting extremely direct incentives for drug companies. i.e. it is a market operating between experts with equal access to time and evidence. The money spent on marketing and advertising to consumers (who have little expertise) and doctors (who often don't have the time to make a serious judgment) not only massively increases costs, but also distorts the market.