storborg

I don't think this is accurate. As far as I can tell, there is nothing in CL's robots.txt, meta tags, or response headers that prevents Google from indexing them. Further, requesting a CL post with the Googlebot user agent yields the same content. This only leaves the possibility that they are excluding Google via specific IP blocks, which seems unlikely. Is there something I'm missing?

If it is worth nothing, why is it insured? And why would they want to hide the details of said insurance?

"If airplanes are to re-connect with their potential customers- or their potential to society- they desperately need an update."

Wait, what? Airplane travel is thriving more than ever. Passenger rail is dying, the FAA is forecasting a >4x increase in the number of general aviation pilots in the next 20 years [1], and it's increasingly more affordable for the upper middle class to fly charted jets [2].

[1] http://www.faa.gov/data_research/aviation/aerospace_forecast...

[2] http://jetsuite.com/suitedeal

It's not contradictory to agree that the MPAA's "every pirate is a stolen sale" claim is bullshit, but still think that torrenting TV shows is unethical.

Some may believe that the ethical choice is just to not watch that TV show.

What developer isn't getting 90+ page speed scores these days? That stuff is trivial low-hanging fruit that rarely requires rearchitecting your application or page.

Re: 3, how do you calculate confidence bounds for a bandit test? I was under the impression that traditional AB testing methodologies (e.g. z-tests, p-values, etc) broke down here, because the sample size is variable.

> Over 93% of 1st position domains are over a year old. This not only confirms the fact that Google favors older domains, but heavily stresses the importance of seeking aged domains for your projects if possible.

No, it doesn't. Correlation != Causality.

Thanks for the clarification. I, for one, think that would be a great reliability/security measure.

What is a pull request if not an ordered list of SHA1 hashes and comments?

How does the customer know it's even Stripe's javascript running at all? There's nothing preventing the injection of malicious JS to capture the card number.

I think the point is: portfolio = "what did you do?", whereas resume = "where did you work?"

I don't believe it's possible for a site accepting credit cards on a non-SSL page to be PCI compliant, period, no exceptions. It's trivial to MITM to steal your card info.

> still a gnat in realm of business

That hasn't been my experience on several modest content sites. Across the board Pinterest sends more traffic than Facebook, Twitter, or Reddit.

That concern exists with 3rd-party ad networks as well: a publisher site could certainly cause ad impressions to happen without an eyeball actually seeing those ads. (e.g. text-indent: -5000px)

The answer is just that they don't, but they do know if they are getting conversions. So the market corrects itself, and after some amount of time advertisers will (probably) stop bidding for impressions or clicks that aren't doing them any good.

Also, falsely indicating to advertisers that you are showing their ads is fraud.

Perhaps the same reason why "referer" has not been corrected to "referrer".

It's not like they're setting up brick and mortar stores. Pinterest is just as available in Germany as it is in the US.

Previous posts[1] have indicated that Fog Creek does rather extensive profit sharing. Isn't that just a form of commission? Further, profit sharing includes non-sales employees.

[1] http://www.joelonsoftware.com/articles/fog0000000038.html

Some Python programmers might argue that's one thing Python has over Ruby and JS.

Use types.MethodType for that:

    >>> import types
    >>> 
    >>> def hello(self):
    ...     print self.name
    ... 
    >>> class Foo(object):
    ...     name = 'blah'
    ... 
    >>> goo = Foo()
    >>> goo.hi = types.MethodType(hello, Foo)
    >>> 
    >>> goo.hi()
    blah

Edit: pre-2.6 you'd use "new.instancemethod()"

Would it be possible to use gdb or something similar to inject this into a running process?

So I assume you willfully pay your tax on all online purchases?

In what way is it "not mobile compatible"? Works fine on any phone I've seen it on.

Nope. As mentioned above, apparently Google thinks people will "shoot themselves in the foot" with the crawl-delay directive, while they won't with Google's special interface (which requires registering and logging in).

Do you have any solutions for dealing with slight browser rendering differences? E.g. antialiasing on one browser but not another, slight font size / padding differences, etc. What browser are you "targeting" with the image?

These are beautiful. My first reaction was that these looked way too artsy to be direct grabs from street view cameras, and I wanted links for proof.

Here is the un-doctored version of the Utsira, Norway shot: http://g.co/maps/th3bb

I love this format. Can anyone point to more "Rosetta Stone" examples like this? (Aside from ever-prevalent "X in Coffeescript compiles to Y in Javascript")

If you need to authenticate from another party's hashes, why not run bcrypt on those?

Whenever one of these posts comes up it seems like there's a lot of comments rushing to defend salted MD5 or SHA1.

What's actually wrong with bcrypt that prevents people from using it? Is it not available on all platforms? Too computationally expensive?

I don't think pg's trying to hide anything. It's presumably just a lot of work to maintain an up to date public index of blocked domains and rationale.

I've often seen a different, but related effect of client side analytics where content thieves will "accidentally" spoof analytics data by simply copying a site verbatim, with the analytics tag included.

In this case it's usually relatively easy to filter out, because the analytics host will identify the fake requests as coming from pages served on a different domain. However, it is annoying, and a combination of content theft plus hijacked DNS could result in more sinister influences.