someguy1233

Why mongo is terrible: http://www.mongodb-is-web-scale.com/

Mongo is a bad choice for 99% of projects. Unless you're 100% sure your data is unstructured and will never ever relate to anything else, it's probably bad.

Mongo is designed for unstructured data. That is data which has a very loose relationship to any other object, and data which changes often or is unpredictable. To top it off, Mongo doesn't have transactions. Without transactions, you have to implement them by hand with something like Redis, which is rather iffy.

You almost always have structured data. A wish list would probably relate to products, which relate to merchants such as Amazon, Newegg, Ebay, etc.

Those relationships are a pain to express in Mongo. In-fact it even ends up being slower to express them in mongo, because of it's lack of JOINs, since they don't expect you to have relations.

I personally recommend MariaDB (MySQL fork, included by default on most linux distros now to replace mysql-server). Despite it's poor reputation, it's used (in some form) by practically every big company, including Facebook and Google.

PostgreSQL is another great option. I've found it a bit more difficult to find guides for Postgres, which is why I recommend it second to MariaDB/MySQL.

Postgres is not flawless, it has awkward quirks, like the fact you cannot sanely upgrade postgres versions without exporting all of your data, and then re-loading it again. However, it is regarded as the most powerful open source database, and possibly the most reliable database.

Short answer: You don't. You can threaten to take it to social media on your support ticket, and maybe threaten a chargeback in the support ticket. That often gets their attention.

Small warning: avoid actually doing a chargeback at all costs. If you do it without permission from Steam, expect your account to be permanently banned, and with their already awful support you're probably never going to get it back.

I think if this was available in some package managers, it would be pretty useful. I mean being able to apt-get/yum/brew/choccy "ricey" and have it work on all of them would make this a deal breaker

Well they kind-of do.

If you have ever used snapchat, they have these strange face-tracking filters, for example one of the most known is the "barf rainbows", where if it detects you've opened your mouth, it aligns rainbows coming out of it, and enlarges your eyes.

The fact is however, HTTPS offers massive improvements for security for the majority of users, especially those using public or shared Wi-Fi (i.e. Work or School), assuming they're using their own device. Assuming HSTS was set up, it would be impossible to strip SSL without causing most browsers to panic and refuse you access to the website.

On those types of networks, MITM attacks are extremely easy, and there are tools to do it in seconds. It may be more likely for you to get MITM'd and have them modify the signature, than for the actual website to get hacked. Combined with the fact that some people would try to download Tails across these types of network for the added anonymity.

Aha, correct. Loaded up the website that appeared downgraded, it's still HTTP/2 in the incognito window, and chrome://net-internals/#http2 does confirm that it is in-fact real HTTP/2 (not the extension being odd).

Why would this behaviour happen? I don't understand why it does the initial session in HTTP/2 but then drops to SPDY upon further requests

Update: looks like I might have caught them in their testing phase. One of my sites has suddenly been downgraded back to SPDY, but one of the other sites is still HTTP/2

I believe the fact you haven't been caught by the random transaction issue is because you use Chip&Pin a lot, which might reset the contactless counter (since it knows that you have the pin, so you're likely the card holder)

When I went to the MetroCentre the other week, I did about 5-6 contactless transactions in a day (probably somewhere around £100 spent total), by the end of the day my card got declined and I had to use Chip&Pin, so it does definitely happen in the UK, though the limits may be quite high (wonder if this may also vary based on the bank, I'm with a certain bank which refused to give me a contactless card until I had a credit check).

This is the first time since I got the card (quite a few months ago) that it was actually declined however, so it's quite a rare occurrence.

As for the EMV spec, It sounds like the terminal is the one that decides whether or not to request Chip&PIN:

During kernel processing, the kernel will determine from the acceptance environment and issuer settings in the card whether a cardholder verification is needed for the transaction. Methods that may be supported are online PIN and signature – offline PIN is not suitable due to the “card in field” timing issues.

what is the kernel?

The kernel contains interface routines, security and control functions, and logic to manage a set of commands and responses to retrieve the necessary data from a card to complete a transaction.

Checked all my spam boxes on my various gmail accounts, seems nothing bad has happened with mine.

At least they're nowhere near as bad as Outlook. I have one of my domains on their free Live Domains (grandfathered plan, can't get it for free anymore, similar to google apps) - and 90% of my emails end up in spam, even if they're from a reputable company with sane mail setups such as Digital Ocean, Github or even Google.

To make it worse, with Outlook you can't turn off the spam filter, and it's known that Microsoft sometimes SILENTLY drops emails for various reasons so they never even make it to your spam box...

Sadly I've yet to find any decent replacement mail service for my domains that's free (or very cheap) and of decent quality.

There's a native cross-browser API that's slowly becoming more compatible from Javascript.

http://caniuse.com/#feat=clipboard

Important PSA for Skype Users: Open up "Internet Options" (yes, the ones in internet explorer), security tab, and add https://apps.skype.com to the "Restricted Sites" list. Skype will still work fine, however there will be no advertisements.

This is important because Microsoft seems to use a lot of Flash advertisements without checking them (I've had plenty of "MICROSOFT VERIFIED DRIVER FIXING" ads come up inside of Skype, so I'm sure some zero day could slip though their ad system)

Seems to be a slight issue with your site on mobiles, somehow your button is overflowing onto a new line: https://imgrush.com/Qryn4-uvcegH.png

(resolution is 1080x1920, using Firefox on my Android 4.4.4 OnePlus One)

Laravel is best learned from the documentation. Laravel 5 changed a lot, but most things from Laravel 4 still apply; I'd recommend looking at Dayle Rees' Code Bright along with the official docs http://daylerees.com/codebright

You're right about the criticism though, it's hard to find any quality comparison on the internet, that's why I've posted here, in hopes of finding a lesser biased comparison, especially from those who've changed their go-to framework (e.g. from Laravel to Rails, from Express to Django etc.)

Last time I looked at Play, I took one look at Akka/Reactive Programming and knew there was no chance of me touching that.

I might look at it again, this time staying far away from Akka. What's the performance like? Considering it's Java I would assume pretty good, but I'm not sure how bulky Play is

What purpose are you using them for? I tried Jekyll and found it just got in the way of me creating sites, so I found Middleman.

Middleman is much easier than Jekyll if you want to build any kind-of normal non-blog website.

I'm surprised nobody has mentioned TypeScript. I've been using it in one of my projects recently (WebStorm even has a file watcher that works with very little set up on my Macbook).

TypeScript is pretty good at giving you a taste of ES6, it brings in a lot of features from ES6, such as the new classes, default arguments, generics, as well as a few of it's own features (interfaces, optional static type checking).

They ship it as a node module, so you can just "npm install -g typescript" and it's ready to go. As much as I dislike Microsoft, Typescript is something that seems to work well, and unlike Coffeescript, I can quite happily paste in standard Javascript code (even most ES6 code) and it won't break my source.

Not sure if HN has already crashed their site, or if the site is just broken.

"Gateway: Unable to connect to host."

There's also quite a few european countries with free college/university education. To name the main ones: Sweden, Norway, and Switzerland

AFAIK, Norway offers this privilege even to international students, while Sweden gives it to any EU citizen

What DNS provider do you use? It could be that you set up some sort-of DNS modification such as http://clintberry.com/2011/wildcard-sub-domains-on-osx-web-d...