skysight-inc/HackerNews huggingface dataset:
Could someone please explain to me why Home Depot and Target would even have the information of 56M cards?

Is this a result of not using chip and PIN, relying on offline transaction processing or some weird subscription plan?

I understand that there would be a cost involved in implementing chip and PIN across the entire US and it may not solve the issue if they insist on having the card on file. Online credit card processing has been pretty much standard for the last ten years here in Denmark. Terminals are connecting to the credit card processor, either via an ISDN/ADSL/phone/GSM connection, everything is encryptet and the store never has anything expect the cardmask.

So why do companies like Target have the card information of their customers?
It seems to me that everyone is missing the point behind object-orientation.

Object-orientation sucks for everything except user interfaces. If you don't believe me, try writing a UI library without objects and see what happens. UI is OOP's best (and only compelling) use case.

For all other algorithms classical data structures/ADTs are much better. If you don't believe me, try writing an OOP compiler.
Most questions seem to be geared for tech base companies, but with the request for startups some other type of businesses are going to apply. Which questions our Food based company should focus on?
UC Press E-Books Collection, 1982-2004
Apple is becoming a company I no longer trust
Data Visualization with Angular and D3 on the Twitter Stream API
> When you create an SSL connection in Europe to a west coast server there are a number of round trips. If those can be avoided you can cut the latency of the transaction. That is a good thing too.

Note that this will at most cut the connection setup time by half, as your premaster secret (RSA) or handshake data (ephemeral DH) still has to cross the Atlantic and get back to you (and the TLS handshake has 2 roundtrips).

Furthermore, because of

> Generally the key you would give them is for, and limited to, the resources that they cache/reverse proxy,

all dynamic data still is supposed to come from your server. So the browser will have to wait for that, while everything from the European mirror is cached anyway.
I see twitpic, imgur, Facebook, and even services like flickr as temporary methods to share photos online.

Indeed, and for that reason it's a shame why only few services allow seamless synchronization. Apparently, you can show Google Drive photos in Google Plus, but not with an Apps account (which I have). Dropbox currently comes closest: I can add photos from files/folders to Dropbox photo albums. This is really the nicest way of photo sharing: I can just copy a photo to my Dropbox folder, share it in an album as in Flickr. My local Dropbox folder is backed up through time machine, etc.

Of course, Dropbox' album functionality is currently severely limited. I'd really like to see them expand it, or Google to make their service smoother and generally available, or some startup that makes photo albums from your Dropbox/Drive/OneDrive folders.
Your paper brain and your Kindle brain aren't the same thing
assuming they followed all relevant security procedures and protocols, what do you propose they do in the future to not lose customers like you?

protecting yourself against custom malware like the type the article says infected home depot is not easy for tech companies, let alone non tech businesses.
That's typical, the RaspberryPi isn't exactly optimized for size, as it has a huge number of GPIO pins, for example, and is also designed for low cost of manufacture.
I find it a tragic that such an efficient, powerful, portable computer is so locked down hindered that it will only ever be used as a phone. I so desperately want to be able to use cost/power efficient computers for desktop use. I waste so much electricity using this hulking tower where I don't need to use it to it's full potential 99% of the time.
I think the most important thing would be for the community to understand what ports and what doesn't port from the elisp version that everyone uses- until then I don't think many will be able to make an informed decision regarding the risks of migrating.
I feel it helps show the web and computation as an invention sewn into the fabric of consciousness somewhat before it was "Faster Than Thought."

A significant factor of programming communities is a dominant hierarchy narrative for said superior technological mechanics that are imagined and featured to be so new and original (said mature and advanced), when I find we have the technology but we're still looming.

It is an important statement, is many ways of historical significance tieing to how a system grew by caring for meticulous threading, which being conscious of can help us tell the story we need to understand our information work, and how it links together.
oh my god, it's even more entertaining with the wayback machine's page header.
Human eye with cornea, iris and lens and would be a nice addition for physiology students! :)
> (Module signatures, it should be noted, may be shared by multiple implementations, permitting compile-time dispatch.)

With first class modules, you can even get runtime dispatch, just build a new module dynamically, selecting the concrete implementation depending on, say, on a command line parameter.
As long as you can tell them apart you can target ads. You don't need to know the names, exact addresses, email etc.
Gcloud – Google Cloud Client Library for Node.js
@cscharenberg Consider it as snippets. Cheers
Well, the cost is getting too high for me. BofA has replaced my debit card at least four times in the past three years, necessitating I update all of the online billing stuff I use. This is a hassle, not to mention BofA's new ATM software being so glitchy it beggars suspicion about how much twine and gum is operating behind the scenes.
So their little blackmail on twitter worked :)
Phonecouragement: Encouraging 5 Minute Calls for Whatever Your Goals Are
Yeah, nothing clever at all. Tons of ways for user input, and this one just yet another one.
Only donor tissue/bone is rejected. Non organic matter is not.
Is there a good reason for why lazy I/O is terrible? It seems like the ideal solution for async-heavy programs
Results of Scotland independence referendum: 'No' campaign victorious
> The module system in OCaml sounds very nice (and we all know what the "O" for!). But there's still a bias towards a sort of static-ness in FP. For example, the use of abstract data types where a Java programmer may use a class hierarchy. Clients cannot extend an ADT: I can't make my own List in Haskell and pass it off to a function.

Depends on what your function accepts. If it takes explicitly a list, you're screwed, but it clearly was never intended to be generic. If it accepts something Foldable or Traversable, just make sure your data structure has an instance for these type classes.

In OCaml, you can have objects and inheritance if you absolutely want to, but you can get a lot out of structural typing before going there. If you want extensible ADTs, you can, but you need to plan for it by using polymorphic variants [1] at the expense of some safety.

1: https://realworldocaml.org/v1/en/html/variants.html - scroll down to the "Polymorphic variants" section
A Long, Ugly Year of Depression That’s Finally Fading
> Session reuse makes this somewhat less of a pain, as the keyserver need not be queried for repeated https connections.

If a DOS is actively attacking the bandwidth of the keyserver, none of the attacking connections will reuse old sessions, though.
Awesome tool! It even comes with a temporal fake mail generator, really useful.
Home Depot? I'm good. Tell me when Amazon gets breached.
and yet another, Jerry from ChessNetwork

https://www.youtube.com/user/ChessNetwork

I stumbled across one of his videos, not being much of a chess person, and have watched probably a hundred since and love chess now. he's a US Master.
In-depth: How CloudFlare promises SSL security–without the key
> I know why we went to OO. And let's not forget OOAD, a beautiful way of joining analysis and design about the problem with the solution itself. I'm of a mind that OOAD might live on even once the world moves to mostly FP.

Never heard of it, but sounds interesting.
> Generally the key you would give them is for, and limited to, the resources that they cache/reverse proxy

That got me wondering: Why don't attackers then only DOS the dynamic pages? Those that can't be migrated easily, like the login?
An English parliament based in say Manchester could be interesting, I wonder if they'll go for modern representative democracy or try to just expand the power of the current dysfunctional first past the post system?

"But Michael Gove, the chief whip, made clear that greater protections would have to be offered to protect the interest of English, Welsh and Northern Irish MPs”

Notice he says its the MPs interests that need protecyes!, not who they represent.
Well he's obviously had some "work done". Which I think is great, why not? Money is surely not the problem, life's too short to look crap.
The title of this submission: "First phase of restorating the 'Bucky' dome is complete"

The title of the linked article: "First phase in restoring Bucky Dome complete"

"Restorating"? This is why we have clipboards: Copy. Paste.
Elon Musk – Post NASA Contract Interview
Link to source code for the game:

https://github.com/Meridian59/Meridian59
Until Mayer unveils a product as impressive as the iMac (or iPod), I wouldn't jump on that stock just yet.
The dynamic pages still go through CloudFlare; there's a Web Application Firewall which can block abuse directed at a specific URL, pattern, etc. The cache is only one part of the DDoS mitigation.

(We've been working on a lot of great updates to the WAF for just this kind of thing)

Generally with CloudFlare people put as much of their site behind the CloudFlare proxy as possible, for origin-hiding and other reasons, even if we can't cache it (yet).
C++ sequenced-before graphs
iPhone 6 Teardown: https://www.ifixit.com/Teardown/iPhone+6+Teardown/29213
If you think you have found the silver bullet then you are still on the journey too.
"The market can stay irrational longer than you can stay solvent" is a common saying in the financial world: it means that even if you're right that assets are overvalued, there's no guarantee that they'll come back down to earth in any reasonable length of time, and so betting against the market can often be a losing gamble even when you're right.

In some senses the market is never "irrational", because a security is worth exactly what someone will pay for it, and so by definition it always has the right price. In other senses, the market is always "irrational", because its price is determined by the emotions of its participants and not any sort of rational analysis. (The whole reason markets are efficient is that they average out the misjudgments of many members, such that those who miss the mark too much drop out and cease to become participants.)

I think Owen's point is that the sky is always falling. Bubble psychology and boom/bust cycles is a natural part of the operation of markets.
True, but I meant for the performance for legitimate users.
The big advantage of OO is that it acts as a distillation of how humans think. We're accustomed to thinking in terms of 'things that do stuff'. What OO provides is essentially a skeuomorphic element to your code, where your basic units have some resemblance to real items and concepts. This makes it a lot easier to reason about large codebases, and makes them easier to document (in theory).

It seems to me that you're sort of confusing OOP with programming interfaces.

An interface describes a model of how to use a certain piece of code, and indeed a good one can be almost "obvious" and it begins to feel like a "natural" way to reason with it. But it's all about the interface: not about from what kind of language constructs the interface is composed of.

Interfaces can be done in object oriented programming too but for some reason, possibly exactly because of the resemblance to real items and concepts and how human people are so fond of those, most interfaces in OOP languages are utter horror.

This could be because it's so easy and almost fundamental to create "things that do stuff", i.e. classes in OOP, there will be a lot of them. The design pattern craze kind of formalized that for good, which is why we've all enjoyed our share of abstract factory builder singleton visitor, or whatever.

In contrast, you tend to see really good interfaces surprisingly often in... C.

As a disclaimer, this is a big reason why I like C language -- it forces you to think simple because it offers so many guns to shoot yourself in the foot and a lot of other places too that you need to focus on what's essential to your program. With an easier but inevitably more complex language, the lull times in the day of programming seem to produce lots of implementation and interfacing complexity that a C programmer would never dare to attempt. C programmers also use paradigms associated with OO but only where appropriate because it's a bit of hurdle to implement those in C.

I've also observed that there's a vague parallel between complex (object oriented) interfaces vs. simple (C) interfaces and the Alan Perlis' notion of to better have 100 functions operating on one data structure rather than 10 functions operating on 10 data structures. Good OO interfaces tend to be really simple and short, even so that they're not even particularly OO anymore.

The OO, procedural, FP paradigms are mostly orthogonal and can be combined freely in sensible amounts where needed, but they're also orthogonal to concepts such as encapsulation, polymorphism, type hierarchies, and inheritance which themselves aren't tied together either.
I used to think it was illegal under the anti-competitive regulations, but just based on proliferation of the strategy I'm not so sure anymore.
Coin Center to Educate Capitol Hill on Bitcoin
The website uses a service located in other domain (servlet deployed in a HTTP server). To deal with CORS, it is better to access the website through HTTP.

We are trying to fix this...
Microsoft OCR Library for Windows Runtime
Don't worry, you haven't reached the right level of experience yet. You'll get there, though you have some attitude problems to overcome first like most young programmers.
It's not a bad idea for people who go through them and successfully get jobs before the crunch comes. As long as they can do the job and don't get laid off, they're way better off than they would be otherwise. (And even if they do get laid off, they're probably better off than they would be otherwise - they have tangible skills that will likely be in demand for a while.)

It could be very bad for the boot camps themselves. The reason they have a business is because the demand for software engineers is red-hot right now; much of this demand comes from the easy availability of venture/seed money. Think what happened to telecoms, ISPs, and infrastructure providers at the end of the dot-com boom. It was not unusual to go from thriving repeat business to absolutely zero customers in six months.
Looks like it, yeah... Personnally I'm not too fond of either behaviour in that story.
> But that will never happen at Yahoo, there is no will to make an excellent product for a technically demanding audience.

That seriously leads me to ask me what the fuck the engineers are actually doing there if they're not improving a core product.
Skating Encouraged, Boosted Boards Is Looking for a Front End Developer
Boosted is building fun, lightweight electric vehicles. We dream about sustainable, hassle-free transportation. We are filled with people passionate about robots and action sports. We are backed by leading venture capitalists and executives.

People love our boards, and we want this experience to stretch across everything we do, including the online and mobile experience. The front-end designer will be in charge of creating beautiful and intuitive digital experiences for our customers. We are looking for candidates that can produce a modern website, suitable for desktop and mobile, and optimize it by looking at analytics and A/B testing.

You will work on:
- Our front webpage.
- Our online store.
- Our entire online presence.
With a focus on style and user experience.

Currently we are using:
- WordPress
- LemonStand
- Digital Ocean
- Bootstrap 3/jQuery/Less
- Python Django
- Git version control

These are the immediate needs, but there’s so many more projects if you have the skills:

- iOS/Android app to sync with the Boosted Board itself. (Obj-C/Swift/Java)
- Graphic design for marketing collateral (Adobe Illustrator)
- Automating data entry during manufacturing. (Python Django)
- Industrial design of new products. (Solidworks)
- The speed controller and battery management firmware (C)

Candidate must be able to work in Mountain View, CA.

If this sounds like your perfect job, please send an e-mail to jobs@boostedboards.com with “Front End Designer” in the subject along with any supporting material you’re proud of (resume, portfolio, website, GitHub).
As long there is no Skynet chip in there, I'm good.
XSS on a shitty website not doing trivial sanitization gets 900 points on HN, oh guys you are disappointing me so much.
Was just playing with Iron this afternoon, it looks great. How far off do you think Rust is from getting these last few web pieces? Rust is promising, but still seems very raw.
INTUAnimationEngine: Easily build advanced custom animations on iOS
If it is not patently obvious to you that broad ramblings about how "human lives have value", "lethal force is not an acceptable way to resolve conflict", "James Bond fantasy" to "primitive Social Darwinism" (and on and on) have next to no relevance to a discussion about Cloudflare's Keyless SSL implementation, of all things, then I don't know how anybody could ever get through to you to help you understand.
Do people really only use these things to "phone"? I spend probably 1% of my time on my mobile actually _phoning_ people. I wonder if this can't be generalized to a lot of other people. If it couldn't make any GSM calls it would only slightly inconvenience me.
But that's the only thing cited in dicroce's comment, and api said "Everything you cite is in or closely related to the IT sector, which is the exception."

Also, self driving cars certainly exist in the corporeal world.
Awesome! I like how he clarifies what this is, isn't and what state it is in. I was definitely wondering where this project was and where it was heading.

I also appreciate how he claims it build cleanly too. Almost feel like building it and trying it myself :-)
10 Badass Facts About Larry Ellison
I don't think that. I think I found a big productivity boost and the ability to focus the mind on more important issues than trying to repetitively trick a imperative language design to do what I want.

Always looking for the next step on the journey. (It isn't Go)
very innovative.
(See also fakenamegenerator.com, discussed here: https://news.ycombinator.com/item?id=7095010)

Personally, I use this:

# aptitude install rig

RIG (Random Identity Generator) is a free replacement for a shareware program out there called 'fake'. It generates random, yet real-looking, personal data. It is useful if you need to feed a name to a Web site, BBS, or real person, and are too lazy to think of one yourself. Also, if the Web site/BBS/person you are giving the information to tries to cross-check the city, state, zip, or area code, it will check out.

$ rig
Adolph Cline
739 Anton Dr
Mentor, OH 44060
(216) xxx-xxxx
$
Its harder to reason about resource usage with lazy IO. For example, when is it safe to call hclose to close a file handle?

do
f <- open "file.txt"
s <- readContents f
hclose f
print s

Since readcontents is lazy, it only tries to get data from the file when you print s. But by that point the file has already boon closed!

If you think about it, its a bit similar to the tradeoffs between garbage collection and reference counting.
It looks like it's supposed to be backwards-compatible with pretty much all existing elisp code.
Preventing anonymity harms a lot of people:

http://geekfeminism.wikia.com/wiki/Who_is_harmed_by_a_%22Rea...
The Biggest Mistake I've Made During My 5 Years as a Business Owner
In short, this is the sad life of researchers in Software Engineering. You would think we have all kinds of facilities to setup our own servers and the like. Well, we don't :-( (and I better stop here)
http://www.reddit.com/r/haskell/comments/1e8k3k/three_exampl...

Tekmo

I highly recommend reading these slides by Oleg:

http://okmij.org/ftp/Haskell/Iteratee/IterateeIO-talk-notes....

They are his old annotated talk notes and they give a really thorough description of real problems that lazy IO causes with lots of examples.

Edit: Here's a select quote from the talk:

> I can talk a lot how disturbingly, distressingly wrong lazy IO is theoretically, how it breaks all equational reasoning. Lazy IO entails either incorrect results or poor optimizations. But I won’t talk about theory. I stay on practical issues like resource management. We don’t know when a handle will be closed and the corresponding ﬁle descriptor, locks and other resources are disposed. We don’t know exactly when and in which part of the code the lazy stream is fully read: one can’t easily predict the evaluation order in a non-strict language. If the stream is not fully read, we have to rely on unreliable ﬁnalizers to close the handle. Running out of ﬁle handles or database connections is the routine problem with Lazy IO. Lazy IO makes error reporting impossible: any IO error counts as mere EOF. It becomes worse when we read from sockets or pipes. We have to be careful orchestrating reading and writing blocks to maintain handshaking and avoid deadlocks. We have to be careful to drain the pipe even if the processing ﬁnished before all input is consumed. Such precision of IO actions is impossible with lazy IO. It is not possible to mix Lazy IO with IO control, necessary in processing several HTTP requests on the same incoming connection, with select in-between. I have personally encountered all these problems. Leaking resources is an especially egregious and persistent problem. All the above problems frequently come up on Haskell mailing lists.

Oleg is a good guy to listen to.
Well....you guys have to look at the bigger picture: Alibaba was rejected by HK stock market the first time around, then Jack decided to take it to NYSE. Of course 21B is nothing in comparison to the other big brothers like Facebook, but ask yourself this question: what really is Alibaba doing in China? For one, Alibaba is about trading on the international scene, and its seed Taobao is like eBay China version; then they are into car manufacturing as well, not to mention Alipay being the paypal of modern day China....clearly, that 21B he raised can't even cover a lot of the expenditures for development. What Jack really is doing is to get his company that global recognition. Any of you can name ONE brand/company that based in China on top of your head? Well, that's what Jack is trying to do. You think he's unfocused? How about this: for someone who owns the e-commerce platform of the world's 3rd biggest country, he is utterly focused on becoming "China's international brand." Don't forget, China is the jumping board, and Jack is the pioneer. Once he claimed first, who will remember the ones from the subsequent ranks?