skysight-inc/HackerNews huggingface dataset:
I want my desktop operating system to offer fairly fine-grained control of permissions I selectively grant to processes/applications. I would like the ability to easily revoke Chrome's ability to use my audio inputs, and then—if the use case comes up, such as a WebRTC conference—I can grant permission either on a one-time basis or until I revoke. This would be the operating system controlling the application's capability.

I'm guessing a rough approximation is possible on some operating systems. Given the sprawling management infrastructure in Windows, I wouldn't be surprised if it has some "policy" framework in place that allows devices to be declared off-limits at a process granularity. The missing piece, then, is a viable user interface on top of that.

I'm not asking for something akin to the simplified permissions model of mainstream sandboxed mobile operating systems. Not set-and-forget; and certainly not all-or-nothing ("accept these required permissions or don't install the app.") Rather, something quite a bit finer grained and with the necessary infrastructure to have the OS prompt for privileged access if the application wants something I've disallowed, in a manner akin to Windows UAC prompts for admin credentials.

Imagine starting Chrome one day to have your operating system prompt you, "Chrome would like access to audio input 1 (microphone). Allow for now, permanently, or deny?"
The current salt market is based on a supply of actively produced salt. Only ~7%* of worldwide production is "solar salt", derived from evaporating sea water. The rest is actively mined or extracted by other methods.

Dumping 200 million tons of new "solar salt" on the market would collapse prices and signal the end for the existing player in the salt industry. I don't think this would be an issue in the long term as salt derived from a hypothetical mass-desalinization industry is essentially free. Replacing heavy industry with the byproduct of an essential and beneficial process is the very definition of economic and environmental efficiency.

California gets a secure water supply, consumers and industry get cheaper salt, and the imprint of the salt mining industry is no longer a concern in the environment.

*Source: http://www.saltinstitute.org/salt-101/production-industry/
My school tracks tickets with ServiceNow extensively and it's one of the worst pieces of software I've ever used. If you want enterprise, at least use JIRA Service Desk. They actually tried to design a good UI.
You don't have to, they accept DMs from people they don't follow.
--PSA regarding Credit Card Validation--

Last year I was testing Stripe integration. I tried using my own credit card with a fake name. Surprise, it went through. I emailed Stripe support. After half a dozen emails discussing CC authorization I learned that Stripe does not and can not validate Name & Address on credit card.

Stripe told me that Credit Card companies do not disclose this data to Payment Processors like Stripe. Thus, Stripe simply passes on the name & address to the CC API.

Interestingly enough, Name & Address are NOT validated by major credit card companies. You can use junk names on your name & billing address and that will NOT stop your credit card transaction from going through.

Try for yourself next time you order something online. Makes me wonder why they even collect the data in the first place...
The Real Landscapes of the Great Flood Myths
I can't really put my finger on it, but this is the most exciting thing that I've seen on HN in years.
Right? This is the financial industry, you shouldn't have to "publicly shame" a company to get a response.

A ticketing system would give some organization to the chaos
Newbie here. The "?" operator is the same used in Swift?. any difference?
There have been some theoretical unifying attempts such as Paul Levy's "Call By Push Value" and more recently this

http://arxiv.org/abs/1504.07680

But I haven't found anything particularly satisfying from the practical point of view.
In theory, that's only true if the user has given permission for some remotely-accessible application to activate it. In practice, the NSA almost certainly has ways to accomplish it, but that doesn't mean we should make it trivial.
Acid is great, the best debugger I know, unfortunately the Unix port in plan9port is completely non-functional.

Go is really annoying to debug in acid though, because symbols contain dot characters. Somewhat ironically this was done because Unix debuggers were getting confused by the unicode middle dot character, so the unicode middle dot is replaced in the symbol and debug tables with a regular dot.

But on Plan 9 we should not do this process and we should keep the original middle dot.
> Why do you consider it reasonable for Apple to use artists' IP, free, in order to acquire users for Apple's paid services?

I don't and that's a false statement about what's happening. When the free trial ends, payments from the users are split with the artists. Both the artists and Apple benefit from the success of the service.

You could equally well say - "why should artists expect to user Apple's IP to market their music for free?"
> I think if cities and states had to choose between Uber with people (more jobs) and Uber with autonomous vehicles (less jobs) they would or should pick the former.

As much as cities and states can regulating employment rules, and taxi rules, they can also regulate rules for use of autonomous vehicles. So, when it comes down to it, they don't have to choose a regulatory regime that makes either of those options viable.
I think that is what the author means, but I also think it's a valid usage; it's ironic.
They probably wouldn't if these were applies globally. Thankfully (for them) each country, state, district etc. has their own sub contractor vs. employee threshold.
Open source analytics for Arduino
That's not what he said though, was it? The complaint was that the GPL would force his users to share back, which is true.
I'm trying hard to read your words, but I can't stop noticing your username and having Clerks flashbacks. Have a great day - you (inadvertently) started mine with a good laugh! :)
Bekijk+het+maar
It's "hear, hear."
It’s a Mistake to Mistake Content for Content
Conversely, objects should have a single responsibility [1] and so functions that are unrelated should go on different objects. An InvoiceFetcher is definitely unrelated to a PaymentApplier, unless one takes the argument that "Its about money", in which case you have to argue for a single giant class.

[1] http://c2.com/cgi/wiki?PrinciplesOfObjectOrientedDesign
Newbie here. The ? operator is the same of Swift?. Any difference?
40+ Core Java Coding Questions Which Will Test Your Java Basic Skills
Same. I've sent them support emails and just never heard back.
Firefox is open, high quality and user friendly.
> So, maybe you didn't mean innovation, but invention, and maybe you don't think Apple deserves much credit, because you think invention is much harder than innovation and design? But if that truly were the case, then why do so few companies do what Apple does?

Even fewer companies do invention, so I don't think your closing argument quite proves the point it's trying to. But I do take accept your argument none-the-less.

Innovate generally means to incorporate something new, but it's true that you don't necessarily need to invent to innovate. However Apple are aggressive in litigating against anyone who they feel borrows their ideas via intellectual property laws - which would suggest they at least consider themselves to be inventors, even if you don't include that in the definition of "innovation".
I dunno, I always thought objects were about managing state. If an object does nothing except provide a method, why can't the method just be a free function instead?

InvoiceFetcher.FetchInvoice()
PaymentApplier.ApplyPayment()

just seems terrible.
Accessing S3 from Linode is prohibitively expensive. The base storage fee is the cheap part. It costs three times as much to transfer one gigabyte of data off of S3 ($0.09) than it does to actually store the gigabyte of data there for a month ($0.03). Linode doesn't have to come anywhere near S3's storage prices in order to be competitive for Linode compute customers, as long as data transfer between Linode VMs and Linode storage is free (as it is between EC2 and S3). I'd gladly pay $0.10/GB/month for a Linode object hosting service.
You're kidding right? I tell you what, how about you mix up a tank of 18% O₂ / 45% H / 37% N₂ pressurized to 230bar. Then open the tank valve next to an old outboard motor or a deckhand smoking a cigarette.

Sport diving with flammable mixes is something that only works in hacker fantasy land, not the real world.
Ranges for c++
iirc the desal plant was disassembled and sold to Saudi Arabia sometime in the 90's. I have no reference for this at the moment.
> Last year I was testing Stripe integration. I tried using my own credit card with a fake name.

This sounds like a great way to get your account shut down.

They provide test/mock APIs for a reason.
Moving from one server to another can be instantaneous. Just use the cellphone model where they do proper handoffs between base stations. As to loading assets, plenty of games used a streaming model where you can explore huge worlds without issue.

PS: Skyrim is an interesting case where there is a player made patch to make city's open world where the original game has a loading screen. http://www.nexusmods.com/skyrim/mods/8058
Well, many developers will eschew the comment as well. :)
Does this exclude them from Beats 1 as well? I haven't listened to Ebro or Julie but I know there will definitely be music coming out via Beggars (XL & Young Turks) that Zane Lowe will want to feature - I could see it really pissing a DJ off if they can't play music like this just because their employer can't get the licensing right.
Childhood development is one long transition of the child from dependence to independence and one long transition of the parent from authority to peer (and then to dependence in old age). Friendship exists in various ways along that spectrum.
Can you provide any proof of that?

No, Android phones are not listening all the time
our billing team has noticed this. Pretty crazy
Seems unlikely to be the full and absolute time line of events.

Ironically, we've seen this before with the many complaints about PayPal.

While I'm open to the idea we're getting the full story here, I think your view may turn out to the right one.
I've been doing TDD for nearly 10 years and this article describes my experience in a way I have not been able to distinguish myself. Thank you.
Thinking outside the box
dear silicon valley techies at times you may have an idea that somehow seems good but not in demand by silicon valley VCs. here an option for you wannabe disruptors try the developing world if circumastances permit and you veriy that your idea can work Africa, South AMerica is there for the taking at least whenyogotothenextvmeet u c ing you havssful project that is recorded in your portfolio. disruption can be as easy as changing the market and making it work then the interest follows you.
4+Ways+for+New+Developers+to+Get+Started+with+Open+Source
I'm curious how you phoned them up, as they're quite adamant and public about not offering any sort of phone based point of contact.[1]

[1] https://support.stripe.com/questions/do-you-have-a-phone-num...
Correct me if I'm wrong, but Stripe does verify the zip code if the administrator of the account enables that.
A typewriter is an optional tool for producing a written work. With programming the computer is a necessary object required for converting the intentions of a programmer into both information about the world and actions within it. I think it's fundamental to understanding code to grasp a meaningful model of what a computer is and how it turns key presses into code on the screen and in a file, how it turns the code in that file into a sequence of simple instructions and finally what those instructions do.

This article did a good job of that as well as many other aspects of software development.
TLDR; It's not so much that it seems naïve, as it is about not providing any reasoning, sources or data to back it up - thereby not being reliable. Also, tone is hard to convey on the internet.

While I think many would agree that the answer is short and snappy, I don't really care and I don't take it personally. And it's not about you "not taking the time to properly explain" yourself, nor your experience - and I say this in an apathetic, and not an antipathetic sense.

It's about your non-answer response to my pointing out your invalid assumptions (and thereby faulty reasoning) about CBT and depression, which indicates that you either couldn't or wouldn't argue your point.

This makes it have very little to no value in a discussion, where one ideally makes logically coherent and well reasoned arguments (perhaps even backed by data), since no one can assess any claim properly without the application of skeptical inquiry.
Also, as javert pointed out, the response appears overtly patronizing.

Additionally, I think that participants in discussions pertaining to mental illness (amongst other subjects) in particular have a unique responsibility (i.e. a moral obligation) to back their claims up and rely upon knowledge, as the subject is fraught with ignorance - which results in all sorts of negative outcomes for those affected (see stigma and history of societal views of mental illness, provably ineffective treatments leading to avoidable suffering, etc.)

If you were not up for a "lengthy debate" about psychology, I have a hard time seeing your previous contributions in this thread as anything other than the airing of an opinion for its own sake followed by closing of the ears.
And an opinion holds no merit by virtue of being an opinion.
You also have yet to comment upon a single point I've made in either comment, and the only response is a google query presented as a retort - the results for which don't even make the point you set out to make, as far as I can tell.

I'm sorry if this comes off as cranky - I'm really not!
> If you teasing your sons is being raised as an issue by your wife then maybe you are teasing them too much?

After having four kids I would say it really depends on the personality of the kid. Three of mine love wrestling and teasing (each other as well as me), but one absolutely does not. Nothing wrong with that, and it's even been great for teaching that everyone is different and how to respect their feelings.
He did use Allegro, but only to host his own compilers.
So, Apple wants to promote its new streaming service using musicians' music for free, and threatens to to remove them from a different platform, iTunes, if they don't comply. Still pretty bullshit.
It is an intervention applied to living tissue, claiming to have medical benefits. It's a principle of medicine that anything present in quantities/intensities sufficient enough to produce a beneficial response, is sufficient to produce a negative response (aka, side effects). Those need to be assessed and quantified.

If we changed the word "ultrasound" to read "laser", I suspect it would make the need for scrutiny more intuitive. "Ultrasound" has this connotation of being harmless.
Some products are real magnets for stolen card use

Charities also have huge problems with CC fraud, as they're seen as an easy target to test card details against before making the "full" purchase elsewhere:

http://www.bankinfosecurity.com/stolen-cards-tested-on-chari...
It should be pointed out that traditional merchant gateway providers (larger, with more resources) are WORSE than stripe in this regard. Prior to stripe, we used cybersource. It was a support disaster, to say the least.
How to Get Responsive Images Fully Implemented in Microsoft Edge and Webkit
Hell, I shouldn't have to register for a twitter account to be able to contact someone in any industry.
Yeah, should not [2012] be in the title?
I recently reached out to Stripe to get their opinion on whether or not I should bother trying to integrate stripe.js with my browser based game. I obviously didn't want to invest the effort if they were just going to shut me down a few weeks later. It says in their TOU that virtual currency sales are allowed so long as it's self contained and can't be traded for real money or across other websites - that was the case with my game.

After over a week of waiting for a reply (PayPal's initial responses are rarely helpful, but at least they tend to respond..), they told me I shouldn't use Stripe because I would almost undoubtably be considered high risk. Why not just say it isn't allowed?
Name is not validated and seems useless to even collect. However both billing Address line 1 and Zip code can be validated by processors, including Stripe.
> It would imply that whoever says something first is right.

On the other hand, it's wrong for the child to play her parents of each other. If mom says 'no', it's not OK to go ask dad.

If Mom gave a different answer than Dad would have, Dad should discuss it with Mom if it's important, perhaps in private. But it's also OK for kids see parents disagree and work things out in a healthy way. Then Mom can change her own 'no' to a 'yes' later and retain her authority (and get to be reasonable and nice).

But, yes, first-to-answer is a silly way to make decisions.
Agreed.

A lot of FSF advocates don't realize how toxic the GPL has become outside of the FSF bubble. GPLv3 software in particular is a now non-starter for a lot of companies and has undermined a lot the goodwill businesses had towards GPL software.

The shift towards BSD, Apache, and other open source licenses is a symptom of that and unless the FSF wises up, support for GPLv3 projects will dry up.
Universal+Keygen+Generator+2014+Full+Free+Download
I'm learning Rust and it would be nice to see a Rust powered kernel, just for hack with it a learn a lot.
Sorry for the typo, updated.
Do we just link to random commits now? I have no idea what arrow functions are or why it would even matter to half the people who visit this site.

edit: after following 4 links I finally found the bug report about it

https://code.google.com/p/v8/issues/detail?id=2700
>we struggle to see why rights owners and artists should bear this aspect of Apple’s customer acquisition costs

This. If Apple wants to draw people to their music service with a free 3 month trial, they should be ponying up the cash for those 3 months, or at least part of it since this is ultimately a mutually beneficial arrangement. Expecting labels to pay for the richest corporation on earth to attract people to its new music service seems wrong.

The artists releasing things in this quarter are going to be the worst affected. I know that I won't be purchasing any new music in the next 3 months.
> Try for yourself next time you order something online. Makes me wonder why they even collect the data in the first place...

You're right, you don't need the billing address to process a payment, although it's not true to say it's not used at all. Sometimes card companies do validate it, it depends on the type of transaction and the fraud profile. Often it's fuzzily matched, so name may not matter.

But you can also use it for other things: for example, fraud detection. Say your billing address is in New York, but your shipping address is to some Eastern European country. That's a big flag for fraud. So merchants collect it because they want to avoid damage to their bottom line.
What is their current income from Apple streaming?

Since it hasn't even launched yet, wouldn't it be $0? Thus, there are no temporary lapses in income.
Introducing Continuous Integration for Go on Semaphore
After using Stripe for our subscription service for over 1year with 100'000euro+ monthly transcation we got a 10day notice that they would shut us down. Also the mail was send late on friday before a long weekend, yeah! =)

No warnings, no chance to appeal, no heads up and absolutly no possiblity to call them. Lost around half a million euros before we could get our customers exported to another payment processor. Thanks Stripe!

It's a great service when it works, not so great at customer service.
Virtually all card issuers support AVS (Address Verification System) in US, UK and Canada. In other countries, it's less reliable. AVS checks only the numeric portion of the street address and postal code, and returns a code indicating whether AVS is supported and whether one or both of the numbers match the ones on file with the card issuer.

Stripe supports AVS the same as other processors. Whether you choose to reject cards that don't pass AVS is up to you: it's a setting. So is which of the codes you want to reject. That's the case at every payment processor I've used. Different businesses, collecting cards in different scenarios, are going to have different risk profiles and different needs. If you're running a store selling computers to strangers over the internet, you probably want full AVS in addition to other fraud checks. If you're taking an invoice payment from another business you've worked with for years, you might not want to bother collecting and verifying an address.
The basic clock app on my Android phone takes 33MB of memory. That is completely and utterly insane. Except for playing MP3 alarms, everything on it could be done on a 64K Commodore 64 without breaking a sweat. And of course, the actual code for playing an MP3 is baked into the Android operating system, so that's not what's taking up all the space.
>Being consistently funny requires some amount of intelligence, creativity, and self-confidence.

Considering most "funny people" engage in low effort puns or just ape what they hear on TV or the internet, I'm not so sure of that. I guess the potential mother's taste in humor is important here.
Apropos of nothing much, back when I was coding primarily in Objective-C (incidentally, for cross-platform Linux and Windows, but not anything Apple) the form of the function call would give another much more expressive option. I'd write something like this:

[drawline from: A
to: B];

Obviously, some people hate it.
Actually, Flash also runs on a virtual machine, and its language (Actionscript) is a dialect of JS that gets compiled into bytecode.
It's up to the merchant / intermediary party to specify how much validation they want. Yes, you can choose that only card number & expiry have to be correct, or you can go the whole 9 yards and want name & address to be correct.

This isn't a Stripe-specific case. Moneris, a card processor in Canada, has a bunch of fields that a merchant can check on/off if they want them to validate the details during payment.

But you're right - if the validation isn't happening, why bother collecting the data? At the very least it might hurt conversion rates.
I'm just surprised the handle disappointeddev was still available.

Do you sell cheap virtual goods? They're sometimes used to test stolen cards I heard.
The one thing that surprises me most is why banks don't provide an payment processing API for their customers. I consult at a top bank in Canada ,and I brought this issue up several times in the online banking division and was met with complete indifference. The middle management ( all PMP certified) dont have the vision and the upper management is busy coasting along. My reasoning was that the bank is already doing a lot of business with the business customers and there is trustful relationship and quite a lot of these customers had some form of online presence ,so helping them with online payment processing would be cheaper for the bank ,given their working relationship. and these businesses would not consider taking their business to competition as that would entail switching costs. Also, fraudulent transaction would be less given the relationship history. But what do I know ? I am just an engineer .
Then it seems like the perfect opportunity for you to learn something new and stretch your mind a little.