Hacker Newsnew | past | comments | ask | show | jobs | submit | viperscape's commentslogin

But that means waiting for the third party right?


You can use publicly available data feeds that changes every few minutes. For example, CNN's Afterhours trading data [0] seems to work pretty well. And it's just HTML, so you just hash it and you're good.

[0] http://money.cnn.com/data/afterhours/


Magic links are susceptible to man in middle attacks if your DNS is compromised, like on public WiFi, because the reset token is in the URI itself. So you're most vulnerable when you click the link.


No, they're not, unless you also have a valid TLS certificate for the domain.

If I link you to https://foo.com/login?token=123, you need a valid TLS certificate to foo.com in order for my browser to actually send that token to it or for me to reach that page.

Even if you MITM DNS to give an ip address you control, it doesn't matter since you won't have a valid TLS certificate for foo.com, and so you gain no information.


HTTPS usually is implied by any security-aware website and HTTPS will mitigate this attack.


Not if the service uses TLS; adversaries will only be able to see the hostname.


I was just about to comment on magic and pokemon cards! Maybe even baseball packs. All could be traded for real cash, and obviously were! It's such a grey line though, the original intent of the cards is to not be traded around for cash, but be used to play games or simply collect (without the intent to sell) and be enjoyed. To be frank, I'm glad the world is cracking down on the digital forms of this, I think it's a bit corrupt-- explicitly targeting minors with considerably less self-control. In my opinion, it's right up there with apps that use in-game currency gems/coins that you can purchase with real money; because kids targeted by that game audience often don't understand the repercussions on such activities. I think there needs to be a very fine line drawn where a child cannot make a digital purchase, even if inadvertent. Regardless. It shouldn't be a "we suggest you set up parental controls", literally the device should be locked down from entirely preventing such behavior and must then be overrode by an adult.


You didn't take a multivitamin? How did your body handle lack of vitamin c? or d?


I didn't. Just electrolytes.

I won't say I felt amazing for the duration - I fatigued easily, as could be expected, but other than that and some light-headedness when standing quickly from a seated or reclined position (which is common for people following a keto diet, too), nothing felt seriously off.


Have you tried Botox? Might be a good way to test your theory


just recently saw this, where you see two custom 275 lbs monoblock tube amp-- I thought it was extreme but cool: http://www.stereomojo.com/Small%20Speaker%20Shootout%202007/...


I don't understand in general why OLED is taking so long to be mass produced for TVs and monitors. It's like just now becoming mainstream, with what seems like two actually purchasable products.


I have an LG OLED TV, and I would recommend against purchasing an OLED for monitor use.

Burn-in is still a huge issue. I've used mine for about a year and the red channel is full of distracting burn-in patterns from still elements on my screen from things like wallpapers, tiled window borders, taskbar/docks, HUDs from games, etc.

Does anyone know if MicroLEDs could suffer from burn-in as well? I.e. do they also degrade over time based on usage?


LG oled TVs are all white with a color filter.


That's news to me. Any idea what would explain the red channel exhibiting much more burn-in than others then?

I've tested this by filling my screen with each color, and burn-in is by far the most visible with a red fill.


I don't have any knowledge of LEDs, but I believe that the burn in problems in OLEDs are due to them wearing out due to them being organic, which presumably wouldn't affect artificial micro leds


Gattaca, here we go


The article mentions "cannabis abuse" a few times, what metric is there to put use into the abuse column?


Using when illegal seems to be the common definition.


Use turns into abuse when the person is aware of harmful effects but continues to use. Or when the person wishes to discontinue use but is unable to.

Some definitions include very high rates of use.


It has to be more than just "is aware of harmful effects but continues to use", otherwise anyone who is aware of the existence of hangovers (or other negative effects) but continues to drink alcohol is "abusing" it.

It would have to be something like "the person using the substance doesn't feel that the positive effects are worth the negative effects but they still cannot stop using it."


Yes, sorry, "is aware that harm is caused but continues to use".

BTW if people are drinking alcohol and regularly (once a month) getting hangovers they're absuing alcohol.


Oh, I thought that's what it was for. :P


"scheme web framework", except there are multiple scheme implementations and variants. I don't understand why the word scheme is even used, each scheme is basically a silo.


Unless Artanis uses FFI calls (which are not part of any SRFI I recall) it is quite reasonable to implement an entire WAF using standard Scheme + SRFIs (for instance, there's an SRFI for socket IO). Build steps always differ but it isn't necessarily difficult to avoid using implementation-specific functionality.

For a non-trivial example, check out the R7RS benchmark suite [0]. 10 of the 30 implementations there complete 95%+ of the benchmarks. (10 is a lot of options...) Racket is probably the most intentionally divergent from Scheme and it still manages to provide an R7RS front-end making it one of only 5 Schemes to finish 100% of the benchmarks (and be pretty fast).

[0] https://github.com/ecraven/r7rs-benchmarks


As ZenoArrow mentioned, it's like C or C++ compilers, they may be different and made by different teams but they support a specific set of rules, if your code follows those specific rules any compiler that implements the needed features should be able to run your code.

Common Lisp is famous for this, and some Scheme languages as well. In theory this framework should be able to run in another Scheme. Even HackerNews which is it's own Lisp variant once ran on Racket (might still) but it's not impossible to be ported to another Lisp variant (sometimes with minimal or no overhead).


There are variations but there are also commonalities. For example, if two implementations of Scheme are based on the same language spec (e.g. R6RS, etc...) they should be broadly compatible.


She mentions in the "About" page that it is Guile. The release announcement says it as well.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: