Hacker Newsnew | past | comments | ask | show | jobs | submit | noneTheHacker's commentslogin

np is meant for Reddit users that are not subscribed to the subreddit. For example, when I am logged into reddit and go to https://np.reddit.com/r/technology/comments/4if65h/mod_annou... I don't see the voting arrows.


My house didn't play nicely with my Nest. I got a new Furnace and AC and had them install a Nest. It started acting weird. We replaced it with a low-tech Honeywell while trying to get it figured out. I then replaced the Nest thinking maybe it was faulty. I took a photo of the wire layout for the Honeywell and made sure I did the proper layout for the new Nest. It worked fine for a few days and then one day I came home to a 110 degree house! The Nest reported that things were 70-whatever. I then replaced it with a Wi-Fi Honeywell (not their Nest competitor) and that one has worked fine since. It was a very scary experience. I won't be trying a Nest again.


Identical experience here. Installed Honeywell RedLINK and finally my problems went away. Ditto Honeywell wireless security, also works great. There's SO MUCH crap out there, and the wave hasn't even started yet.


Yes, Stripe makes it SUPER simple for accounts to change hands.

I bought a small business from a brokerage site.

He transferred the Stripe account to me no problem. It was as simple as me making a Stripe user account and then him adding me to the account he used for the business and then me removing him.

The entire process took minutes. It took about 3 weeks for PayPal.

https://support.stripe.com/questions/change-account-owner


According to Stripe, they require evidence you comply with PCI-DSS. I'm interested, did they ask you for this?


As long as you're using their JS solutions so credit card data never ever goes through your servers (even temporarily), PCI-DSS compliance on Stripe just means serving the payment page over SSL.

https://support.stripe.com/questions/do-i-need-to-be-pci-com...


Except this article says it is not served over SSL. There's even a huge graphic with an arrow pointing it out.

https://cdn-images-1.medium.com/max/1600/1*dLlQGvWTeMTB7PT_n...


That could just be the last four digits. When you create a token with Stripe, you do still get those back. Conceivably, they're showing 12 asterisks and the naked last four, while retaining the token Homejoy used with you so they can recharge -- although in order to do that, they would need Homejoy's Stripe API secret.


The last four digits are still plenty sensitive enough to make serving them over http blatantly irresponsible.


It's not just that - it allows you to update your credit card over unencrypted http.


Yes. That's a problem, certainly. I'm just pointing out that Stripe's "are you PCI compliant" process is pretty low-key.


RunUO is a fan made server-side to UO. It let's you host your own private servers (shards in UO terms).



I really enjoy using this. While people seem to dislike the red and blue default, I enjoy it. I am not a big fan of the colors working together but I feel like it works the best for it's intended functionality of the choices you made available. I think this might make reading some things considerably more enjoyable for me. Thanks!


That's not always true. Some ad models just care that a user may have seen an ad. A lot of sites you can't just "pay them money."


Is there a way to maybe not worry about productivity measurements? While in school, I didn't need to know how productive I was, I just needed to get stuff done. I either did or I didn't. I was given what was thought as manageable amounts of work but for some, it was too much and for others it wasn't enough.

In work, if I am given what is considered the next most important thing, what will those measurement tools get us? Maybe, at best, an idea if we want more people on the project but those projections can be rudimentary at best. Couldn't we just eyeball it and come to similar conclusions?

Productivity measurement reminds me of stock market analysis. Previous performance isn't indicative of future success. Projects are generally different enough that each one will have new challenges to figure out and learn.


AskMeEvery.com is blocked by Trend Micro for me saying "Dangerous Verified fraudulent page or threat source." I assume it is a false positive but I wanted to bring it up in case Mark reads this so that he can look into getting Trend to fix it.


That excludes TLD emails like postbox@com

I have never come across someone using one but it is valid. I would actually hate to see someone try to use one. I come across enough issues trying to use '+' in my gmail email address.

http://en.wikipedia.org/wiki/Email_address#Valid_email_addre...


It's not just TLDs. Machine aliases are also perfectly valid in e-mail addresses, e.g. "root@localhost", "fred@finance" etc.

This might not be practical in a majority of applications (you're hardly going to sign up to 3rd party services using an alias to a machine on your local network) but if you're building a generic e-mail address validation library, it's an edge case you cannot ignore.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: