eam

And also many companies are built on top of Heroku...

TwitPic on top of Twitter.

>The U.S. is planning changes to the immigration rules that will make the country more attractive to talented foreign entrepreneurs and other high-skilled immigrants, the White House said in a statement Monday.

Yeah, let's go ahead make it more attractive for talented foreign entrepreneurs, BUT let's only offer a few 65,000 H-1B visas per year... What's the point of making it more attractive if there aren't enough H-1B visas to go around in the first place. Seems some what cynical to me.

Sometimes I'll browse through designs on http://dribbble.com/, when I see a design where I like the colors I'll click on it and it'll actually show me a nice palette of all colors in the design. What's nice about it is since these designs were done by great designers the palette almost always works as-is which is quite nice. :)

I generated about 30 different palettes just to try it out, but I didn't like any of them. Most of the palettes generated had colors that didn't even work well with each other, maybe it's just my taste. Good work though, I'm sure you'll be able to make it better.

Hi OP here, thank you for your opinions. I just wanted to say that I thought that I had "thought it through" but apparently I didn't, it was more complicated than I thought it was. This is not the first time in my life that I thought I had thought something through, there have been numerous times actually in all aspects of my life. A year or so ago, I watched a Malcolm Gladwell talk on TED (http://www.ted.com/talks/malcolm_gladwell_on_spaghetti_sauce) where spaghetti sauce companies thought they had thought things through, but really didn't it. Of course I could have spend lots of time reading books, but even then I might have missed this. I just wanted to share my experience and ask for any advice (not legal) just advice/tips in general from others who had been in the same boat. So far the comments have been excellent and invaluable. They have taught me many things I didn't think of before, but more importantly it will help others who might be looking or are doing that same thing I was doing already on my side project.

Hey William, you're on point. This has definitely taught me a bitter lesson. I hope others who are working on similar projects learn from my mistake. As I mention before, today payment processing API's make it so easy to launch a ecommerce service that we forget about other factors. That's pretty much what happened to me.

Both, from sender and receiver.

callmeed, this excellent advice and information here. I urge everyone to read this before getting yourself into a hole. Many of the payment API's such as Stripe and Balanced Payments make it super easy to deploy an ecommerce site that it makes you think you're done, though as I have learned, that's only half the work. The other half is fraud and loss prevention. And as markbnj commented below, you need to monitor it quite often (24x7).

> Law enforcement at all levels were completely unhelpful (I dealt with CA police, AR police, and feds). Once I located the bank and got them on the phone, they at least were able to freeze the checking account (I believe they are required by law to do this once fraud/cybercrime is reported). That's really only a temporary fix though.

I actually did call the bank 2 days after the transactions. I believe it takes 2-5 days for direct deposits to arrive to destination bank. When I called the bank, the support agent said they could see the deposits and that they would freeze the account. Though they haven't been very cooperative since then and communication has been limited. The bank agent I was assigned to has been difficult to reach and work with, even my processing company has had trouble getting a hold of them. I'm really hoping the account is still frozen and they will fulfill the reversals. That's my only hope.

No, you're entirely correct... I completely underestimated the prevention loss factor. Being a side project, I really didn't dedicate 24x7 monitoring, only late at night and early mornings, so this has been an important lesson to me. I have actually already shut it down.

I actually even called the destination bank fraud department which is where the checking account resides. They seem to not care. I called them 2 days after the transactions happened and asked if they can reverse the transactions though the agent that I spoke with said he would work on it and call me back. He never called me back, so I called him back and he said he's still has to get to it and told me to have my payment processing company call him. My payment processing company has tried to call the bank agent for 2 days with no avail. I even tried to call him and many times I was sent to voicemail. It has been 11 days and I haven't heard back.

The first rule of about the Secret HN Board is: You do not talk about Secret HN Board.

The second rule of Secret HN Board is: You do not talk about secret HN Board.

Yep for example the US dollar symbol is also used for the Mexican peso and Canadian dollar. To differentiate they simply use codes i.e. US, CAN, MXN where context is needed. http://en.wikipedia.org/wiki/Dollar_sign

I now want to see 2048 in 2048D.

Pretty funny. Just yesterday I was at Barnes and Noble checking out some Malcolm Gladwell books in the psychology section and right next to them was a book with the title ADHD Does Not Exist. I didn't get a chance to take a peek at it because I was too occupied reading the first couple of pages from Gladwell's Blink which was pretty captivating.

View the source of the index page, the art looks good there. :)

Can't they just disable forms that have the action attribute in forms pointed at anything other than google domain? i.e. a form with action="badbadsite.com/customfile.php" would be disabled.

My guess would be:

Using something like:<form action="somebadsite.com/script.php">

So the credentials entered get submitted to the form which is sent via POST request to an external server. From there they can do whatever they want with the credentials (perhaps save them to a db) then redirect back to google docs.

The Flappy Bird Effect: When a simple game rises in popularity leading other hackers to build an AI and multiplayer versions of it leading to its own demise.

We should expect Gabriele Cirulli to be in Rollingstone next. :p

DHH: https://news.ycombinator.com/item?id=7270098

We do some guest blogging which drives part of our traffic to http://www.wishbooklet.com, the rest is mostly viral links in social sites.

Luke, you probably won't get much responses. "Who's hiring?" are typically automatically posted on the first of every month by this user account https://news.ycombinator.com/user?id=whoishiring which was specifically created for that purpose.

To see past Who's Hiring including December 2013 view these posts.

https://news.ycombinator.com/submitted?id=whoishiring

tl;dr Ignorance is bliss. :)

Tried going to the links and for some reason they are triggering my McAfee Site Advisor with "Warning: Suspicious Site".

Try proactive, I used it when I was teenager.

Not yet, I still don't have many users. Less than 100 at this point.

Clickable: http://www.wishbooklet.com/

Clickable: http://bitmakerlabs.com/

There's usually laundromats in every city.

I think it would be better if it were on the top. When I hold my phone upside vertically sometimes I manage to cover the speaker with my hands.