skysight-inc/HackerNews huggingface dataset:
Having created for my personal use low voltage/high amperage transformers myself to use for house repairs when need it and already knowing the danger of using too much voltage with hundreds of amperes (where the total power would rise well above 1.5kW) I wonder about this circuitry long term usability. I know from personal experience that melting metal using such a transformer is generating a lot of heat that goes back to your transformer isolation. And my transformer would be 1.75 V in secondary or as high I ever went was 2.25 volts. So reading this diagram that has hundreds of amperes at 12V seems highly unlikely. That would be over 2kW easily and using this more then 1 minute would definitely destroy the transformer at least. I use my transformers for maximum 5 minutes then I let them cool for 30 minutes on the cold concrete.
Why is it a structural issue? Decimal places can be added if it's a question of having tradeable units, and over time avg losses will be predictable and not affect price much.
>The real issue there is the fact that macOS doesn't provide a standarized way to completely uninstall an app.
reply

And Windows does? Uninstallers are completely at the behest of application developers. No consumer OS but iOS actually provides any sort of true app level sandboxing.
Nor does Windows for that matter. Running installshield with some command line parameter doesn't count.
Linux package managers come close, but not all third party apps are installed like that.
My reading, feel free to correct if I'm missing something.

This is a compatibility feature that can never change, and shouldn't change, because we can't break the web. But my reading is that CORS is mostly a band-aid on what was a bad security policy to begin with.

The problem isn't that a browser might let a web page on a separate domain send and read any arbitrary request to another domain without permission -- with the exception of DDOS and bot attacks against servers, it's difficult to think of what risks this would actually pose to users themselves. And any native program on your computer can already send an arbitrary request to an arbitrary domain and read the data -- so there are at least few arguments that it might even be beneficial for websites to be able to do the same.

The security problem is that requests are made with your current cookies regardless of what domain you're on. Ideally, browsers from the start would have isolated every domain into their own container, so that if evil.com made a GET/POST request to mybank.com, it wouldn't be authenticated as me, regardless of how the server was configured.

We made it so that cookies could only be read by certain domains, but we didn't think until very recently to make it so that cookies could only be sent by certain domains. And at this point, too much infrastructure relies on this behavior for us to ever come up with a better model, so we're stuck with hacks like CSRF tokens which are dependent on websites being coded well.
> Isn't the human body resistance too high for that

That must be true normally. But years ago I recall reading about someone who fixed an 12V underwater light in a pool. You would imagine that would be harmless, but he managed to create a circuit that ran across the pool. It was a salt water chlorinated pool, and after doing the job he dived in, and it killed him. I don't know how wide the pool was, but in any case the voltage across his body must have been less than 12V, and possibly a fraction of that.
Zoom deliberately circumvented Apple's standard package format, contrary to security interests. Zoom is basically behaving like a virus here.
I can't say I know the details, but I have played CS:GO (non-wine) and Overwatch on Wine without any special hacks with performance indicative of GPU, not CPU rendering. Perhaps it's because they're using Vulkan instead, or the docs are alluding to edge cases that I haven't encountered? I have very little technical knowledge of how it works, but I can say that it is absolutely working.
I would say true morals lead to structuring your company in such a way that you don’t have to rely on business people making ethical decisions moment to moment, because they won’t.
Ann Arbor, MI. A couple miles each way. Every day, all year.
I physically cringed at that photo.
Hurricane Katrina had a huge impact on my worldview. Much more than events like the 9/11 attacks. I generally concluded that putting your safety or security in the hands of governments, or really any institution, was a potentially fatal mistake.

And I'm not just talking about natural disasters. My interest in something like Bitcoin as opposed to banks is attributable to the hurricane Katrina response (the 2008 financial crisis being just a later example of centralized failure).

I'm fairly confident in my position, but I hope to be proven wrong on this one. I never want to see anything like the results of Hurricane Katrina ever again.
Please don't do ideological flamewar here, regardless of how wrong or bad another comment is. It's against the site guidelines.

https://news.ycombinator.com/newsguidelines.html
..."I asked what he had written"...

the quintessence of clay-footed STEM.
Well just until 2014 CORS became a W3C recommendation. Before that CORS was mainly in Draft mode and loosely supported by browser vendors. I do find it surprising that you've never dealt with CORS in the last five years if you've ever deployed any production grade API or web service.
> starting a company with someone is a bigger commitment than getting married

How? You can leave a company you founded at any any time without any financial repercussions usually but marriages you cannot unless you get a prenup (which probably costs legal fees) and that's not even including the ring nor wedding.
> MaNa strategy was a little cheesy in that game - harrasing with warp prism making the bot move his army back and forth.

Even from the games where MaNa lost, AlphaStar made incredibly poor big-picture strategic judgements, in terms of where to deploy its forces. It can't seem to smartly deal with harassment.
There are a bunch of them in Australia, where Hey You is based. I forget what most of the others are called.
What apple should do though is provide an API that developers can hook into, where in when the user drags the app to the trash, it can also uninstall anything else the app placed elsewhere on the system.
Performance of JS is much more controllable than round-trip latency.
Funny, it is also self-inflicted because Safari inspired Zoom to do this hack by breaking the correct behavior of protocol links.

> This is a workaround to a change introduced in Safari 12 that requires a user to confirm that they want to start the Zoom client prior to joining every meeting. The local web server enables users to avoid this extra click before joining every meeting.

https://blog.zoom.us/wordpress/2019/07/08/response-to-video-...
I thought RSS requires polling - to get timely outage notifications does Slack hit all the RSS feeds every minute?
First of all, Facebook isn't doing fractional reserve.

Secondly, banking regulation does nothing to mitigate the risk of fractional reserve banking. Your average bank holds maybe 10% of deposits, the rest is loans way into the future. No such bank can survive a bank run.

What does mitigate the risk (for the average bank customers) is the government insurance for bank deposits. A government can always print the money necessary to bail out a failed bank. What such a bailout could do to a currency is another story. Let's just say we got lucky.

In any event, the government wants the banks to loan out all this money, because that's economic stimulus. You can't have both tight regulations and easy money.
Except that if you auto-update disabled, you'd be somewhat surprised if the virus scanner could update it's signatures.
This all sounds reasonable but Google doesn’t use this strategy and it looks cleaner for the end user. So why can’t O365 do similar?
Pull out the SIM card? I guess once eSIMs catch on, this won't be an option.
The fractional reserve requirements for cash and equivalent are in the single digits, as I said:

https://en.wikipedia.org/wiki/Reserve_requirement#Required_r...

Tier 1 capital is not cash reserves, it's risk-adjusted assets, which may or may not be made up of assets that are as liquid as cash.
How is it a bad idea? To find friend you have to start from somewhere right ? One way maybe from this "dating" site
This explains why I couldn't find it on my system... was scratching my head when the .zoom folder wasn't on either system that had the Zoom.app.

Strong work Apple.
Odd since there is plenty of space underground to store a lot of cars. Wanting street parking in NYC is like wanting to live in a house not an apartment.
Why ignore any other negative impacts like, lack of confidence in crypto from USDT collapsing because crypto is still a Wild West having a random corp printing money at will and there will certainly be a group of people who will face huge loss when billions just evaporate and the impact all the exchanges take who are dealing with USDT? SEC is not going to like it and can probably lock ETF for a good while.
This is the Ship of Theseus as applied to America's love of cars and hatred of bicycles... Neat.
Nor is Apple. See other comments on this thread.
Flatpak, Appimage, etc.

Zoom is even available in Flathub, and that's how I use it.
The right term for that would be MockBook.
My sense is at some point Instagram is going to suppress engagement unless you pay them, they may be testing out how that will play out.
i think the tragedy of web security is that, it's become too complicated to provide simple guidance to developers who are feature-focused. They don't want to become experts in security-header-machinery and crazy amount of domain knowledge needed, but there aren't many other options.

Just look at all the security options a dev has to contend with:

HSTS
CORS (with it's myriad of headers.. ACAO, ACAH, ACAC, etc.)
CSRF
XSS
CSP
SRI

.. That doesn't even count the other fun stuff like SQLi, XXE, LFI, RFI, SSRF, and on and on. It's become real obvious to me, that if the framework or language they develop with doesn't provide it enabled by default AND the most commonly searchable/referenced docs don't explictly tell you to disable it - it's likely not going to happen.
Those are cool looking cases; makes for an interesting wallpaper. The problem I have with laptop cases, and phone cases too, is that it simply ruins the slick look and feel and makes the device feel clunky, and I don't really care about scratches either here and there. But if there was a skin tight case then I'd consider it.
Engagements could also be a zero sum game. People (followers) are most likely following more and more accounts every year, yet could be engaging with the same number of posts.

Would be curious to see results of "private engagements" e.g. engagements on stories. Some of the top Twitter accounts I follow continuously tweet about the increase of DMs / private conversations on public posts. This would play into Mark Zuckerberg's vision of transitioning some of social media from the "town square" to the "living room". [1]

[1] https://www.facebook.com/FacebookforDevelopers/videos/f8-201...
Ah I see -- so it sounds like you agree the advice is not wrong, but it's not in the level of detail you would like. It is only a 500 character example unfortunately, the details of the server API are not really in the scope of my post but I appreciate you elaborating here.
The problems with cryptocurrencies are precisely their lack of laws.

Laws link the real world (a thing or action) to an intangible concept (a transaction or a contract).

Without a guarantee of that link (ultimately, via force), you're left with joke monopoly money.

And if you leverage the existing system to accomplish that link (e.g. via writing legally valid smart contracts), then you're again beholden to governments.

People don't use government-backed currency because they have to: they use it because it's useful and reliable.
You have completely missed the point. The US$5/month is not a hardship. What is a hardship is taking what used to be done in 40k Perl and require 2G. It is a affront!

What is a waste is writing a poor quality greedy web server when Apache/Lighttpd/Nginx all exist and are much much better.

What really cost me was the two weeks I spent trying to make motioneye (python) and motioneyeos (not) work as advertised. As advertised! It is not only that the python is too bloated that stops it working, it does but there are other reasons. Very clearly no body has really tested it. It is a symptom of python culture. Shoddy and arrogant.

I feel terribly burnt by it. Twice. So my stack of desire in this domain is quite small and simple: Never to hear again from python! A very personal POV, be happy in your python hacking. I saw the opportunity to have a public rant and I took it!
Yea, I think loosely inspired by Australia's plot to kill sugar cane-ravaging beetles with cane toads (that then became a nuisance).
Super cool, can I ask what your tech stack is?
I think that is the point.

MacOS users expect an app that does not come bundled with an uninstaller to be "uninstalled" by dragging the .app bundle to the trash. This generally leaves behind metadata, but that is not a big deal as it is just data - not code.

Leaving behind code that continues to execute after the user has removed the application without an option to uninstall it is obviously something that never should have shipped in the first place from a customer trust perspective.
I physically cringe too at the fact that you just made an account just to leave that comment.
That's cool. It's a nice idea, but I think cases are just a better, easier way to do it.

That said, I use a case and have no stickers. Everyone else I see has tons of stickers on their MacBooks, though nobody seems to put stickers on their Windows laptops.
Totally agree. I did the same thing about a year back, and my wife and I are going through them together. She thought it would be too 'computer-y' but it's really about the characters and everything that they go through. I think I'm enjoying it more the second time through. Good point on Gordo/one's own legacy btw.
I wonder goes into the "most profit" number between items in the same category besides "best seller"...
3D Printed Webcam Privacy Clips – Add Your Own Logo
That's incredible to see: AMD's CEO Lisa Su talked about how getting the 'halo spot' of processor speed was important to the company during the Computex conference and they sure delivered. At nearly 1/20th of the price!

While this may only be the result of a single benchmark, Phoronix covered how the 3900X handles multiple separate ones[0]. The geometric mean of all given tests placed the Ryzen 3900X narrowly at the 3rd spot but within 1% of the Threadripper 2990WX and i9 7960X.

[0] https://www.phoronix.com/scan.php?page=article&item=ryzen-37...
The most awesome was SAL, a vector math library by Mercury Systems.

Every function came in multiple varieties, specialized for the expected and desired cache hotness of the data. Suppose you wanted to multiply a couple matrices. There are two inputs and an output. The inputs could be cached, uncached, or one of each. The output might be needed soon, and thus should remain in cache, or it might be better to save the cache for other things. All of this could be specified.

That library could help a programmer to produce mighty fast programs.
There was a reference to an uninstaller in one post, but also it is expected the uninstalling an app on macOS is simply a matter of deleting the app package.

But again, this was deliberately subverted by the client copying the server out of the app package and into a hidden folder in the user's home directory. Again, this is an intentional choice mimicking malware: the only reason to move the server binary is to break the standard app removal process.

But I maintain that the smoking gun for this being intentional is that the server will download and reinstall the client software, which only makes sense if you expect it to run when the user has uninstalled/removed your software.
JavaScript Standard Style v13 Released
Having a standard installer toolkit that comes with the os and used by many os updates along with a centralized uninstall UI is nothing?
> The corporatocracy is a pretty pure Darwinian machine for encouraging sociopathy.

Molochian[0], not Darwinian. And it's not just placing the worst people in positions of power, but ensuring that people in any kind of decision-making position are the worst people they personally can be.

0: http://slatestarcodex.com/2014/07/30/meditations-on-moloch/
I agree with you, but central banks like the Fed are not accountable like the government is
It is dead easy to set up a raspberry pi to do license plate recognition.

In python, it's probably 10 lines of code.

Once you import the openalpr library, then you get a routine that in one call takes a jpg image and returns an array of <plate-number>, <confidence %> pairs.
Following an influencer is basically the same as reading a magazine like GQ. They show off a lifestyle you find aesthetically pleasing, and the advertisements are part of the enjoyment. People just dislike them because hating young people’s habits is the norm.
I've been a happy (free tier) customer of Netlify for the past few months. Their UI is really intuitive and they have great documentation.
Not everyone equally applies security concepts and isolation the same way. Google is probably less concerned around certain web attacks compared to Microsoft. Microsoft isolates their corporation from customer things, which is good I'd say.
Each sticker adds 5MHz to your speed!
Also true. I'm not sure.
Intent doesn’t matter only results. The result is that unless you like for random websites to be able to activate your camera without your permission, it did harm users. It wasn’t a “bug”. They purposefully hacked around a security feature. Do you really think it was a “bug” that it reinstalled itself?
How about a signup-for-updates page/widget? I'd like to donate on a recurring basis, but I may forget to come back whenever you have that sorted out.
anyone else think stickers are super gaudy?
Ask HN: How Do Your DevOps/Ops Teams Handle OS/Container/App Patching?
It seems like you could solve the 'small bids' problem by having a minimum bid size. That bid size could be proportional to the value of the account. E.g. the minimum recovery bid for an account is 5% of it's value.

EDIT: In fact, why not make it a huge percentage of the account value. Even 100%. If you had to bid 100% of the account value to recover it, almost nobody who wasn't the real account owner would take that risk. And the real account holder, being that they knew for sure they would get it back, could presumably find a way to raise money from friends/family/loans to acquire enough capital to make the bid.

EDIT2: In second fact...why not make the lockup period adjustable based on the size of the bid relative to the account value (within limits)? If you bid 50% of the account value, you wait 2x the lockup period. If you bid 200%, you wait 1/2 of the lockup period. You'd need to have a hard minimum lockup of say, 1 month. But in this way, if you were the true account owner, you could bid way more than your account value to get it back pretty quickly, while also ensuring that people that couldn't raise as much capital could get their money back eventually.
That is not the policy in a large chunk of Manhattan. It was not the policy on major (more than two-lane) or downtown roads in Dallas (and its two independent enclaves prohibited overnight street parking entirely). It's not the policy on the vast majority of streets in Miami or the surrounding cities.
I would be reticent to praise them quite so effusively, though I do think they're the best of of the big tech companies currently. I'll be watching the development of this suit with great interest: https://time.com/5596033/lawsuit-apple-selling-itunes-listen...
Call me weirdo but I never jumped on the sticker wagon. I don't see the point of advertising companies for free. My support would be more in terms of using their services (paying, yes) than paying and also putting stickers on my laptop. Is just because fanatism or feeling proud of using something? I'm not trying to be jerk, but I never understood that movement.
Research code is the epitome of non-reusable.

It was written by one or two people, for one or two people to use, once or twice.
Either way, it's pretty damn weird to try to connect begging for money with mass slaughter.
If we end up missing out on anti-user options like the ones that you mentioned then RSS sounds great.
How do your teams minimize the amount of time spent patching? It is an enormous time sink for our devops teams, even using industry-standard open source software basically everywhere.
I wish the pricing scaled with traffic instead of being a flat rate per site.
Just saw one this past Sunday at the Alameda County Fair. It was okay. I don't know if it was typical, but there were only two RVs in the arena, presumably because of their large size and poor maneuverability. Also, because the drivers sit atop the engines instead of behind them, and because it wouldn't be cool for any high-slung wreckage to spear another driver through their front or side windows, they avoided frontal contact almost entirely.

Oh, and it turns out RVs disintegrate rapidly. I learned that it's not the carnage, per se, but the becoming of carnage that is entertaining. The show was over too quickly. In fact, it ended when one of them caught fire shortly after they lost their radiator. If there were more vehicles then that wouldn't have meant the end of the show. Maybe buses--well built buses--would have been more fun.

OTOH, the only demolition derby I'd been to previously was last year's derby at the Alameda County Fair, which was all cars. So probably I should be careful about generalizing.

EDIT: The 2017 fair had an RV demolition derby with 5 RVs in the arena: https://www.youtube.com/watch?v=I-Al1TISq_s
Laptop stickers are a cancer
I cannot stress how important this stuff is for machine learning in production systems. If your ML problem interacts with a client, interpretation matters, and this book gives you a good collection of tools to get started with!
That’s likely to present a problem.

Disney has a lot of depth in their library, but are unlikely to drastically reduce DVD/Blueray/etc sales by including the full thing. Meanwhile customers are going to be disappointed unless they have full access to their entire catalog for a very low monthly fee.

They may leverage the thing to surpass Netflix’s 150 million customer base. But, it’s far from a forgone conclusion at this point.
"(because the uninstalled leaves the web server behind)"

For cripes sake...
Same as the Rust ecosystem a few years ago.
Care to share what you found so funny?
Yeah, but I have an immense distaste for branding anyway. If my ThinkPad didn't have a badge on the lid it would be perfect.
Security practices that are hard to use correctly are often misused/not used at all can be worse than if they weren't there at all (because of the false sense of security). On this axis, and the axis of adoption CORS is a huge failure (despite the fact that when used correctly it does increase security).

The crypto security space has the same issues with hard-to-implement standards and impossible-to-configure libraries -- the likelihood of misuse/overly permissive settings in frustration is really dangerous.

I don't know if there is/was a reasonable alternative (there probably isn't really), but I guess at this point the only thing to do is to write better documentation/guides on how to use CORS.
a little of both iirc
Exactly, you can't simply cap peak APM, you need to cap the maximum APM too.
Understood. I would hope that they spell out the terms of when a key revocation would happen if they were to revoke keys.