skysight-inc/HackerNews huggingface dataset:
Redirecting to a external processor still works to some degree, assuming people check for say "[PayPal, Inc [US]]" in their address bar. I am not arguing that the iframe thing is really better (specially not an invisible iframe). I am arguing that there are good reasons for requirements to be more demanding than "you must send your POST requests to a trusted server".

I suppose ideally we should have platform support for this sort of thing, though. Perhaps something like a payments browser API, hopefully supporting multiple processors (like most browser's search bars). After set-up it should be as simple as getting a browser-level pop-up asking you to confirm the amount or cancel it (plus any sort of auth required by the processor, which hopefully should be as simple as nothing for small transactions and tapping your card to the NFC reader for large ones).
Slinky – An easy way to query your PostgreSQL data
> And if MySQL wasn't robust then YouTube, Facebook, Twitter, Alibaba, LinkedIn etc wouldn't be using it for core parts of their infrastructure. It's definitely robust.

Popularity is not an argument for quality. See: crocs, Justin Bieber, PHP.

Those companies you mentioned, like many others, probably use it because they're locked in that technology, not because it's a superior one. Just like banks still use COBOL.

If you're interested on knowing why using MySQL isn't a good idea, there's this (highly opinionated, obviously) post about it: http://grimoire.ca/mysql/choose-something-else
Austria also lost lots of streetcars to the cars and so did many other cities in Europe. A big reason for that was the switch to the right for traffic. As there were alternatives there was sometimes no reason to keep the trams.
The World May Have a Polling Problem
What level of automated refactoring and IDE integration does it offer?
> "calling things by their names is a gesture of respect, if you disagree you must be some sort of LIBERAL"

I'm a bit confused as to how you got this from my original comment; surely using a chosen name rather than an externally imposed epithet or handle is a sign of respect, or at least not disrespect?

I think there's a miscommunication about the liberal thing. I meant it in terms of classical liberalism (a prizing of individual rights over other concerns, for instance, is a central tenet of this; it doesn't mesh well with most varieties of socialism), not in the USA-specific sense of "liberals" vs "conservatives".
Prime Ventures slingert haar Rad van Fortuin aan
Which will hopefully drop in September.
Who is RMS? First results on Google are "root main square" and "Risk Management Solutions".
> How fluid is programming in Haskell? Ever try using it in a REPL?

I program in Haskell using the repl as well as any other languages that make it possible.
They won't probably be glasses, but rather some sort of implant to your eye. That's pretty far off though, and I would like to get something like Google Glass, just higher resolution (and battery capacity).
I found a link to the blog that hosts this article when its author commented on the story about homeless students in the US: https://news.ycombinator.com/item?id=9495895.

When I read the article what immediately struck me is that its central idea — that you can get good at managing crises to the detriment of your other skills — applies beyond one's personal life and financial situation. An example that comes to mind from the world of IT is the system administration team that over time gets really good at "fighting fires" but less so at preventing them. Similarly, the idea offers a surprisingly Hanlon's razon-compliant [1] explanation for the overuse of crunch time. The management sees a tool meant for crisis resolution work well for resolving crises and decides never to stop using it.

I am not entirely sold on the idea but it seems compelling enough to worth investigating for where it can offer novel preductions. My hunch so far is that it may better apply to business failure than to poverty itself.

[1] https://en.wikipedia.org/wiki/Hanlon%27s_razor
I have to say, NIST dudes are/were so underappreciated by the likes of me. Is it just me?

I was in a LUG in the DC area and one of the dudes there was a NIST guy. His use of Linux and Unix was not surprising, but when he would tangentially mention what they were doing with their boxes I would always wonder: how the hell do more people not pay attention to NIST? But maybe that is just me. I have done a lot of sysadmin in the education industry, where we are famous for listening to no one and being the butt of security nightmare jokes.

As someone who is weak in all post-high-school maths, and stats in general, I have definitely bookmarked this for later. I did not care for stats until I finally took my first true computation linguistics class, Statistical Methods for NLP, and years of wannabe linguistics without math seemed pretty retarded after that.

Thanks for a cool link.
Aside for the criticisms provided by others, there is one more optimisation which is regularly used in the stdlib: using default parameters to make closure and global values local.

Locals are the fastest lookup in cpython (by a fair bit), and since default parameters create local variables and are bound once at function creation, you can use them to aliase both nonlocals and globals in order to improve their lookup time significantly:

def func1():
a = 42
def func2(param, a=a, bool=bool):
bool(param + a)
return func2

Of course the gain depends on the exact number of lookups performed on these localised variables and how much work is performed aside from that, but it exists in both pypy and python and for lookup-heavy functions (such as the one above) it can be well into the 10% range.
How much trouble does the resume gap cause you?

The idea that everyone should want to have a job all the time seems like a strange distortion in the labour market.
It's only getting harder if you have "inline" payment. Honestly I'm glad to see that go away.

We always used "hosted payment page" solution, it's safer, and we've been expecting tougher rules for some time.

If you want to talk about online payment becoming harder, you should address the increasing number of payment options that online stores need to support. Adding to debit and credit cards are bank transfers (which is different in every country), PayPal, invoicing, part-payments, financing, and an almost unlimited number of local option.
From the management perspective, I want to know about personal development goals, team member interactions (and problems), and generally just "how you are doing" with a focus not on work product/tasks but on human health.

I block off an hour for each, but want a minimum of 30 minutes of conversation and I can't imagine leaving before then.

When I have mine with my manager, I tend to break it down into four categories: personal, team, department, company.
Fourth result and first person (at least for me) on Google is Richard M Stallman.
(I have a subtle optimization for S-expression syntax)(I am surprised nobody ever thought of it)(When S-expressions are in a sequence use an extra (special) delimiter plus the regular token separator to separate expressions)(Maybe use dot? (period I think some call it))

Like so. I think it could catch on. And you get rid of so many round bracket block delimiters (at least for S-expressions on the same level. for nesting you obviously need them) that it makes reading a lot easier. Also make the language modal and have the default be the indicative mood. Maybe replace "." with "?" for interrogative mood? Maybe elide ".)" to ")" as another optimization?
I pity the hog butchered by a computer programmer (though except for Zuckerberg I heard about few who tried.) I pity as well the programmer honing his hog butchering skills.

If you want to make the most money to be able to work the least hours over your lifetime, then focusing on those skills making the most money at the expense of other skills (and paying someone else with those skills when necessary) is the best strategy by far.

If you enjoy fucking around with plumbing, then by all means fuck with it all you want. But if making less money and fucking with plumbing is your plan to free up the most time for other things (neither making money nor plumbing), then I think it's just plain dumb.
Thank you, that's an interesting take.

I can talk to a lawyer, but I'm not after the legal view. What I'm interested in is the pragmatic view - it's pointless to claim legal rights in the contract if no client will sign it.
That form of ultra-clickbaiting should be outlawed by the internet police.

Refuting your own title in the first sentence just screams "but I made you come here to read this, didn't I, moahaha". To me, it just makes the author seem arrogant.
The Google argument is bullshit because if your site is worth visiting, people will always append "yelp" to the query; just like I routinely append "wiki" and "YouTube".
I have at least three possible theories:

- Flickr was slow. I can't stand slow services and over time I tend to avoid these services even though I want to use them.

- I think there was an uptick in photography for me during the decade when digital cameras went from "meh" to "wow". And then suddenly the world was flooded by meaningless beauty when everyone had a good camera (including on their phones) and a bunch of filters.

- I think social websites filled people's need to tell their story. Flickr, to some degree did that for many people. Albeit in a more abstracted, indirect way. With social media there is more immediacty and there is an ephemeral quality to how you communicate.
> MySQL was never more featureful

Replication? Replication? Replication?
UPSERTS?
Also, MySQL supports multiple engines, so when talking about MySQL it makes sense which engine you have in mind.
Markov chains are trained on data geberated by humans. They have no magic waY to identify a vocabulary.
If you'd enjoy the structure of university life, that's certainly worth considering.

But if you're happy doing it independently, why pay $lots (and add at least some extra bureaucracy) to "make it official"?
Think Like a Doctor: Taking a Stand
Whenever I hear of deep mysterious bugs found in critical encryption systems, the conspiracy theorist in me can't help but wonder...

Did they stumble upon a very well hidden back door? This might not be the last we hear of this.
Because its unlikely that you own a domain that short. They also own j.mp ...a 1 letter domain. Good luck getting one of those on your own :)
San Francisco, of course, kept much of its streetcar system. It's still running and expanding.

San Francisco even has trolley buses. They climb steep hills without problems, which is why they were originally installed.
PSFK Report: Trends influencing how people live, work and play
70 Years On. Remembering the End of World War II
The sign in a photo near the end of the article ("Tie Downs") suggests it can be quite cheap - $7.00 / night.
Marketing Automation Software
VB analyst Andrew Jones has taken massive number of marketing automation vendors, boiled it down to 43 that matter, and ranked them according to best bets for both B2B and B2C at various company sizes http://venturebeat.com/2015/05/05/marketing-automation-best-bets-80-of-companies-increase-leads-77-increase-conversions/

Among them: Hubspot, Act-on, Marketo and SALESmanago from Poland (http://salesmanago.com/) which grows to become a world leader in B2C Marketing Automation for small & medium business.

What do you think about their software? Which of them is best?
Why is "data breach" in scare quotes? There was indeed a data breach, so the case against LabMD seems real enough. If it happened because they weren't following reasonable practices, the FTC response might be entirely justified.

Now, the problem being that the data breach was done by Tiversa. It seems to me that in a case where you know who the attacker was and that they stole this data for profit (additionally, profit by extortion), the penalties for the attacker should be much more severe than for the breached company. Regardless of whether the company was negligent or not. Also, if they reported this to the FTC as a "unknown attacker" type of breach that they just happened to "detect", isn't that attempting to defraud the federal government as well?
Page looks broken for me on Chrome WinX64 42.0.2311.135
Which things cannot be expressed without macros? Macros run at compile time, and just output normal code in the language.

I think being able to generate types is a very useful and important use of macros. In fact, (depending on whether or not your macros can have side effects) you could use macros to implement something like F#'s type providers.
It sounds like they really did get hacked. Isn't the whole point of the lawsuit that they were too insecure with sensitive information, and therefore justifiable?

"Wallace said he tapped into LabMD's computers and pulled the medical records. The cybersecurity firm then alerted LabMD it had been hacked."
I keep saying. Yelp needs private ratings, and it needs detailed rating for Elite reviewers. A bad review is a review that praises the meal, but gives 1 star because they couldn't accommodate 8 people in a timely manner. That's all over Yelp. You have to separate the food, the decor and the service.
Yes: http://www.postgresql.org/docs/9.4/static/functions-sequence...

> Important: To avoid blocking concurrent transactions that obtain numbers from the same sequence, a nextval operation is never rolled back; that is, once a value has been fetched it is considered used, even if the transaction that did the nextval later aborts. This means that aborted transactions might leave unused "holes" in the sequence of assigned values.
How do you personally do package management with versioning in Go? Last time I checked Haskell was better than Go here.
Yes, I'm also a huge fan! I'm sorry for the derailment. I probably should have put it in a separate post.
In cryptography, every layer of the stack has a set of possible vulnerabilities associated with it. In the rarest case, primitives (like ciphers and hash functions) are broken; more commonly, the protocol is ill-designed and flawed; but most common of all, the actual implementation itself has security flaws, like side channel attacks.

The issues associated with every layer are considered extremely subtle and tricky to both identify and fix. But I would say this is especially true for implementation attacks, which are not really addressed by cryptographic theory.

So, no, writing your own protocol implementation is not secure, even if you trust the design of the protocol. You are still vulnerable to the trickiest class of security flaws. However, so long as you clearly label your project as "learning only" or "insecure," no one will think worse of you for having your own protocol implementation. In fact, I'd say re-implementing TLS is one of the few ways to become intimately familiar with its internals.
This reminds me of 1945-1998[1]. The map and timeline are similar, but it follows nuclear explosions instead of rocket launches. Considering the two main parties involved in both, it would be interesting to see the data together.

1. https://www.youtube.com/watch?v=cjAqR1zICA0
Google recommends not to use end-to-end encryption for GMail. Why?
Stack Sort
I did for my emulator jor1k. Take a look:

https://github.com/s-macke/jor1k/blob/master/js/worker/or1k/...

Handwritten asm.js code. Around 10 hours or porting time.
There's a class of things that don't require macros in Haskell, but I don't think that means macros are less useful in Haskell. There are plenty of things you might want them for, like generating new definitions.
Your lame idiom example in java is why I love Lua so much:

log.debug(debugIsEnabled and "yo expensive" or "yikes!")
Firm to replace 90% of workers with robots. China expects a trend to start here
>maintenance

If used right, macros make things much more maintainable. If you have a hundred nearly-identical codeblocks, where only (say) a string constant is varying, and suddenly you need to change what those blocks do, bam, you've got a hundred blocks to change. If those blocks had been refactored with a macro, all you have to do is change the macro once. It also prevents the new guy from coming and doing a bandaid fix to line #72 making it slightly different from the 99 lines around it and making your life a living hell.
You don't need real identity verification to prevent fraud, you just need mods, which already exist (Elite) if only Yelp would get their head out of their ass and make Elite mods. They need a karma system. You need karma to write reviews that count towards the rating. I generally ignore reviews by people without friends. But in the current system, AFAIK, their vote still counts and it's the same as mine (Elite).

I feel like this self regulating system could work, just like fake profiles on Facebook don't work.
A trick I often use is to get cheap content written by a topic expert whose first language is NOT English. Then I get a cheap native speaking editor to go over it before it gets to me. This can work out very cheaply if you're lucky.
Exactly. When I ported my software manually, it was the warning messages that helped. After that I can remove the "asm.js" statement and achieve almost the same performance (around 80% of max speed).

asm.js runs currently through an foreign function interface in Firefox, which makes calling the asm.js code slower.
Are you seriously trying to generalise from your experience as one person to an entire city?

There's certainly enough remote work going for you to find a job. Or for everyone reading this page to do so. But there are over 100 000 people working in IT in London. Are there 100 000 remote jobs available?
>These are not real infosec firms, they are parasites.

The entire consulting penetration testing market is setup to encourage this behavior. There is no way to prove you actually did anything correct. Someone can write a wonderful PDF analysis by hand and still leave the system full of glaring holes. Customers can't tell a system is broken until it gets hacked.

>More specifically, we ask for it and we receive it, and we do exceedingly well. If people keep paying us five figures a week to perform a penetration test, we're not going to stop asking for it or reduce our prices.

Right, but many times I've seen companies do it because they are desperate to do it for compliance purposes. :/
Essentially there is a non-trivial portion of the market held up by regulatory demand.

>Strictly "policy" audits such as PCI compliance differ a bit, but in general they should still involve a technical deep dive into your product's infrastructure, conducted by consultants with expertise in multiple tech stacks and overall experience in a variety of frontend and backend frameworks.

I'm curious. Do you review every line of code in a customer's codebase? What about the code of every library they import? If you don't review imports, do you leave a big caveat in your report that says their code looks okay, but the libraries could be full of vulnerabilities?
I think mysql-tests aren't open-source anymore (gift from oracle)
Sequences in Postgres are updated even if a transaction is rolled back. It's pretty easy to see why that's important, especially when dealing with concurrent transactions.

You can't give out the same number to multiple transactions without causing a bunch of unique constraint violations. And you can't retroactively decrease a sequence number without affecting all the other transactions currently executing. You could in theory go back and plug in the gaps in a sequence, but it's more important to guarantee that a single thread of execution will always see increasing numbers than it is to guarantee that all numbers will eventually be handed out to a successful transaction.
Kill it with SMB money? Business like Yelp have always had a hard time monetizing mom and pop shops, and keep them repeat customers. The real ad money is not Uncle Joes' Falafal Shop down the road.
Running `ipython --notebook` with the additional option `--script` may be what you are looking for. This saves a `.py` file with the same name next to your `.ipynb` file (the non-code sections are present, but they are commented out).
The philosophy of privacy: why surveillance reduces us to objects
Hilarious. Great idea to tell people: Give us all your data, else we can't make your life convenient.
Erlang has both methods, pattern matching in function definition and case-clause pattern matching.

(some random link http://stackoverflow.com/questions/1050913/erlang-style-case...)
You could get a last slight bit of juice from localising the closed over variables by binding them as default parameters e.g.

def whitelist_filter(bid_request):
return not categories.isdisjoint(bid_request["categories"])

to

def whitelist_filter(bid_request, categories=categories):
return not categories.isdisjoint(bid_request["categories"])
I wrote a small snippet to integrate this with tmux. Simply press <Leader-i> for the current buffer to be run through fpp.

See a small example here: http://recordit.co/U2TYvbPC9p

And here's the corresponding code: https://github.com/jbnicolai/tmux/blob/master/.tmux.conf#L12...
It's very simple. 50bps of every transaction that you make. They will need MANY transactions to justify a $1B valuation :)

They're investing heavily now (at a loss) in marketing and in international expansion (note the recent US launch). Have you seen their recent marketing campaign in the UK? If you refer 3 paying users, you get £100 ($155) cash. Their cost of acquisition is therefore £33/user if not more. Assuming a 0.5% margin, they are therefore implying that each paying user will make at least £7,000 ($10,000) in transfers with them. And that's just to break even...
I'm impressed. Not by the first 90%; that's par for the course (and why I'm a big believer in open source). No, what impresses me is the sharing of their solution. A solution, which, in their own words, is 'not a proper fix'. The engineer in me would be embarrassed by the fix but you can't fault that it works. There's a workaround, so the business perspective is any further time spent fixing this could be spent working on new features instead.

Still, I have a bunch of unanswered questions. Why not just upgrade all the hosts to Xen 4.4? Does recompiling the 3.0+ kernel without the bad 'if' in /net/ipv4/esp4.c make the problem go away? Does the problem happen if there's only one VM on a host? Of the seven AES-NI instructions, which one is faulting? How often does it fault? The final question though, is what causes it to fault?
I believe it is in their radar. Go 1.6+ :)

https://groups.google.com/forum/#!topic/golang-dev/nMWoEAG55...
Calling log.debug() with and argument of `false` is a no-op? That sounds like someone bending the language to fit an idiom, because it doesn't sound like a sane API except that it enables this use case.
But I don't have time for that when I'm hungry and swimming in a see of bad 4s and great 3s because Yelp is too stupid to implement recommendations and taste profiles. I'm an elite Yelper with a shit ton of data in Yelp, they should've been able to figure out how to automate this by now.
Maven-style dependency managers (including leiningen) just contain the locks inline in the regular build script.
Hey - I was the person who used this tool the most while I was at FB. Thanks a bunch for open sourcing this I've been missing it.
Leanote: Evernote Open Source Clone (golang and Mongodb)
OneSignal (YC S11) is hiring an experienced full-stack Rails developer