Hacker News new | past | comments | ask | show | jobs | submit | someguy1233's comments login

Why mongo is terrible: http://www.mongodb-is-web-scale.com/

Mongo is a bad choice for 99% of projects. Unless you're 100% sure your data is unstructured and will never ever relate to anything else, it's probably bad.

Mongo is designed for unstructured data. That is data which has a very loose relationship to any other object, and data which changes often or is unpredictable. To top it off, Mongo doesn't have transactions. Without transactions, you have to implement them by hand with something like Redis, which is rather iffy.

You almost always have structured data. A wish list would probably relate to products, which relate to merchants such as Amazon, Newegg, Ebay, etc.

Those relationships are a pain to express in Mongo. In-fact it even ends up being slower to express them in mongo, because of it's lack of JOINs, since they don't expect you to have relations.

I personally recommend MariaDB (MySQL fork, included by default on most linux distros now to replace mysql-server). Despite it's poor reputation, it's used (in some form) by practically every big company, including Facebook and Google.

PostgreSQL is another great option. I've found it a bit more difficult to find guides for Postgres, which is why I recommend it second to MariaDB/MySQL.

Postgres is not flawless, it has awkward quirks, like the fact you cannot sanely upgrade postgres versions without exporting all of your data, and then re-loading it again. However, it is regarded as the most powerful open source database, and possibly the most reliable database.


Short answer: You don't. You can threaten to take it to social media on your support ticket, and maybe threaten a chargeback in the support ticket. That often gets their attention.

Small warning: avoid actually doing a chargeback at all costs. If you do it without permission from Steam, expect your account to be permanently banned, and with their already awful support you're probably never going to get it back.


I think if this was available in some package managers, it would be pretty useful. I mean being able to apt-get/yum/brew/choccy "ricey" and have it work on all of them would make this a deal breaker


If people actually like the idea, I'll most likely try to get it in some/most package managers


Well they kind-of do.

If you have ever used snapchat, they have these strange face-tracking filters, for example one of the most known is the "barf rainbows", where if it detects you've opened your mouth, it aligns rainbows coming out of it, and enlarges your eyes.


The fact is however, HTTPS offers massive improvements for security for the majority of users, especially those using public or shared Wi-Fi (i.e. Work or School), assuming they're using their own device. Assuming HSTS was set up, it would be impossible to strip SSL without causing most browsers to panic and refuse you access to the website.

On those types of networks, MITM attacks are extremely easy, and there are tools to do it in seconds. It may be more likely for you to get MITM'd and have them modify the signature, than for the actual website to get hacked. Combined with the fact that some people would try to download Tails across these types of network for the added anonymity.


Update: looks like I might have caught them in their testing phase. One of my sites has suddenly been downgraded back to SPDY, but one of the other sites is still HTTP/2


[deleted]


Aha, correct. Loaded up the website that appeared downgraded, it's still HTTP/2 in the incognito window, and chrome://net-internals/#http2 does confirm that it is in-fact real HTTP/2 (not the extension being odd).

Why would this behaviour happen? I don't understand why it does the initial session in HTTP/2 but then drops to SPDY upon further requests


I believe the fact you haven't been caught by the random transaction issue is because you use Chip&Pin a lot, which might reset the contactless counter (since it knows that you have the pin, so you're likely the card holder)

When I went to the MetroCentre the other week, I did about 5-6 contactless transactions in a day (probably somewhere around £100 spent total), by the end of the day my card got declined and I had to use Chip&Pin, so it does definitely happen in the UK, though the limits may be quite high (wonder if this may also vary based on the bank, I'm with a certain bank which refused to give me a contactless card until I had a credit check).

This is the first time since I got the card (quite a few months ago) that it was actually declined however, so it's quite a rare occurrence.

As for the EMV spec, It sounds like the terminal is the one that decides whether or not to request Chip&PIN:

During kernel processing, the kernel will determine from the acceptance environment and issuer settings in the card whether a cardholder verification is needed for the transaction. Methods that may be supported are online PIN and signature – offline PIN is not suitable due to the “card in field” timing issues.

what is the kernel?

The kernel contains interface routines, security and control functions, and logic to manage a set of commands and responses to retrieve the necessary data from a card to complete a transaction.


Checked all my spam boxes on my various gmail accounts, seems nothing bad has happened with mine.

At least they're nowhere near as bad as Outlook. I have one of my domains on their free Live Domains (grandfathered plan, can't get it for free anymore, similar to google apps) - and 90% of my emails end up in spam, even if they're from a reputable company with sane mail setups such as Digital Ocean, Github or even Google.

To make it worse, with Outlook you can't turn off the spam filter, and it's known that Microsoft sometimes SILENTLY drops emails for various reasons so they never even make it to your spam box...

Sadly I've yet to find any decent replacement mail service for my domains that's free (or very cheap) and of decent quality.


There's a native cross-browser API that's slowly becoming more compatible from Javascript.

http://caniuse.com/#feat=clipboard


Important PSA for Skype Users: Open up "Internet Options" (yes, the ones in internet explorer), security tab, and add https://apps.skype.com to the "Restricted Sites" list. Skype will still work fine, however there will be no advertisements.

This is important because Microsoft seems to use a lot of Flash advertisements without checking them (I've had plenty of "MICROSOFT VERIFIED DRIVER FIXING" ads come up inside of Skype, so I'm sure some zero day could slip though their ad system)


Skype on Windows has ads? Is that a recent thing? The Mac version doesn't, or not yet, anyway.


It's had ads for at least two years now. That was the last time I used it on Windows.


The OS X version now has ads, but only on certain pages. Highly annoying. This was one of the historical differentiators.


If you want to do this on a Mac you can use software such as Little Snitch. Create a rule prohibiting Skype to connect to apps.skype.com.


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: