skysight-inc/HackerNews huggingface dataset:
We are not going to need any of them until we do. People just don't adopt them because wallets are still difficult to use, , they are a nightmare tax-wise and because most banks fear/hate them. But in a world beyond those obstacles, many of them will be useful for different reasons. Some will be safer as long term value stores , others will be fast enough for microtransactions. Considering that exchanging between them is trivial and instant, i think there will be many of them circulating in parallel
There is a chicken and egg situation with cycling and cycling infrastructure (as there is with any mode of transport). Any method that allows for incremental advances has got to be an improvement to the chances of increasing cycle usage.
Just for your own edification: https://www.youtube.com/watch?v=rRi8LptvFZY
ANY sort of relevant engineering experience is good enough to get a great job in this industry.

Going out of your way to work for a mega-corp like Google is unnecessary.
Wouldn't this be stopped by address translation by routers for normal users? Don't know much about the app itself...
Java for example, can use "compressed OOPs" -- ordinary object pointers. This is a 32-bit stored pointer but shifted, as pointers to objects always point to something on multiple of 8 bytes. So the shifted address is stored, but then shifted left before being dereferenced, allowing addressing of 32GB memory with 32-bit references.

I read some longer article about the evolution and options for memory addressing in JVM, if only I could find it... but here's another one: https://wiki.openjdk.java.net/display/HotSpot/CompressedOops

There are variations on this method that can be applied to other memory management pools. For example, let's say are allocating many objects for processing, need them only within a certain span of time and have to free all of them when it's over. Well, rather than individually tracking allocations you can allow a single perhaps growing memory area, store the start offset somewhere and reference them with a shorter reference relative to that area.
See above.

https://news.ycombinator.com/item?id=20403155

I wouldn't write the comment if I wasn't 100% sure the cards were original. Yes, you can get original Sandisk cards from aliexpress for that price, and actually verify it on the manufacturer's website. You can't do that for Samsung.
To actually quote from TFA:

> The story is that users will buy Netflix streaming services and it will be too much trouble to switch to a different service, which is a variant of a phenomenon called “lock-in.” So no one will be able to compete, the company will be able to raise prices and lower costs, and voila, another Amazon-style monopoly. It will be one of the few left standing after the inevitable shake-out.

This doesn't strike me as a flawed premise. Stoller suggests this is a variant of lock-in, not actual lock-in, and makes the comparison to Amazon. Amazon's selection is huge and their convenience is indisputable, and we've become so used to just going to Amazon first that we often don't bother to check whether they actually have the best price. (When I do actually check that, they often do, but they don't much more often than you might think.) And the price of Amazon Prime has increased by 50% in 5 years.

> You also have multiple streaming services backed by companies with far more money than Netflix either already on the market or coming within the next year...

When any streaming service that isn't Netflix is mentioned in an article, here or anywhere else, comments are filled with people complaining about subscription fatigue. How many of these services are actually going to survive, do you think? How many are you going to subscribe to? If you're already paying for three, or four, or five, how receptive are you really going to be to articles exhorting "The best show on TV in the last decade is exclusive to Service Number Six!"?

And, on point for the article, if you are already paying for three, or four, or five, Netflix is one of them, isn't it?

If you're only paying for two, Netflix is one of them, isn't it?

If you're only paying for one...?

And that's the premise of the article. I'm glad your dad's enjoying the Roku TV, but I don't think that makes Stoller fundamentally wrong.
Cheap automatic license plate readers are creeping into neighborhoods
It'd be even more interesting to see the kind of builds and strategies it would come up with if they capped APM to average or below-average levels.
This, pretty much. Motorists can be extraordinarily vocal without realizing how extraordinarily entitled they are to be able to operate their motor vehicles in urban environments where accommodating those motorists has an extraordinarily detrimental effect on the community in terms of space, traffic, pollution, congestion, etc.

Not really a slight against motorists, I am one and never had this realization until I spent some time trying to use other modes of transportation. People are accustomed to being able to drive everywhere and that just isn't sustainable.
Our architect works 50% and I as the lead developer am going down to 80% soon, it will be interesting to see how it works (or doesn't).
I’d also consider who wants to work remotely for a SV company while living somewhere they’d rather be for whatever reason
APM is an interesting question I think. Like what is the relative importance of APM to strategy?

If I have 20% more APM than you do I beat you even if I totally pick the wrong units and build order? Could a super smart bot win against pro's even if it's limited to 20% less APM?

So yeah it might be interesting if the bot gets superhuman to trail several versions with progressively lower APM caps to see how much you have to limit it before humans can beat it again.
Just bought one for my wife!

It would be cool if I could kick in a few extra dollars so you could send one to every female American congressman and senator.
That’s not a panacea. Power loss can still get you: https://news.ycombinator.com/item?id=16777889
Thank you! Really enjoyed reading this article and others on your website.
I don't particularly mind this. All the shows that I love usually peak within their first 3 seasons. I'd much rather a show end while it's good than for it to drag its feet for 7+ seasons and die with a whimper. Most viewers just follow trends and are fickle. This is Netflix's way of allowing shows to have fans but also stay viable(cool, hip, new, and full of zazz) for the general audience.
Agreed. Both of my sisters became teachers. Both of them left the profession after a few years. One even went back to college, negating the “we cant train them fast enough”. She already had a masters degree but still went back to college for more education to get away from teaching.

This is speaking from an American perspective but teaching is absolute hell. Teachers are more and more expected to pay for their own supplies, work 12 hour days, become counselors and therapists, plus advocates for special needs or abused children. Many students coming into kindergarten cannot read or recite the alphabet, but even worse many are not potty trained. The parents expect the schools to take care of 100% of the child’s education. And more and more in America, teachers are expected to shield students from real, actual bullets. One of my sisters left the profession when the state started talking about giving teachers guns.

All for $30-$40k per year. It’s not worth it. It’s too much work for too little money. Your job is constantly under fire and political scrutiny. It’s not even education anymore.
if 5 days worked (down from 7) and 4 days will work (down from 5) then why not just go straight to zero days?
Everything you say counts towards your profile. It's the threat of social media framing or relationships, essentially.
The way MCAS handled its two sensor inputs is basically malpractice. It's mind boggling to me that someone developing that system thought it was an acceptable mode of operation.
The Great Wave: what Hokusai’s masterpiece tells us about museums, copyright
Also most of the work we do is to bid against each other for land. If we all worked 45 hours a week the extra 5 would go into land costs, we'd all have the same house, and land speculators and usurers would have slightly bigger yachts.

Given the huge ramp in productivity on necessary work, we could easily slack off some and see our living standards unaffected.
CORS is a minefield. It doesn't help that the RFC is incredibly dense. I may be totally missing something, but I've repeatedly wondered though if CORS still has its place in times of SPAs that exclusively use xhr + javascript + some sort of auth token talking to a REST API?

Consider this argument: CORS basically ensures that browser and servers cooperate to protect end users from a "smart" user agent that happily throws around cookies and/or auth tokens. Remove cookies and basic auth headers, what's the point of CORS?

Happy to hear thoughts from folks more knowledgeable in web security than me. If not, let's please get together to propose an RFC for the CORS-GTFO header (a server header indicating that a browser does not have to do wasteful preflights etc.)
You underestimate how many people are willing to take altruistic actions when the (perceived) cost is sufficiently small.

The main downside is an extra question during an onboarding flow.
We have gone the other way during my lifetime in the UK. Once there was a time when every single shop in the local town was closed on a Sunday and most of the shops were closed on a Wednesday afternoon. The banks were only open from 10 until 3. There were very few convenience stores open until late in the evening. The choice of late night fast food options comprised of a couple of fish and chips shops or a couple of restaurants.

It was also possible for families to have just the one parent out working. That parent would also be back home in time to watch the six o clock news. People did not go on two hour commutes.

We accepted all of the changes positively. For instance, it was great that women could now do the same jobs as men. It was nice to have the shops open when you were not working. It was convenient to be able to buy stuff late in the evenings, including alcohol from places other than pubs. Sundays were not boring or difficult if you had run out of milk.

Education in those days was also about preparing the younger generation for a future where there would be leisure time. On the syllabus were lessons on how to use that time. But it did not pan out, this generation ended up working more hours than what the teachers imagined, paying for their education, being burdened with debts, unable to afford a home and having to sit in traffic jams on absurd commutes.

Why do we do this?

There is a rent-seeking class that we collectively have to pay for. The few that own the property, that have the capital and don't actually work. Sure they work, making sure that people pay their rents, but this work does not add value to the economy. We were sold this as 'trickle down economics' where the rich, by having more money, would have more crusts available for the poor.

None of us can step out of this situation. To do so would involve loss of the roof over one's head, destitution and worse. We just have to do the best we can and hope matters somehow improve for the next generation.

In the world of programming we can carve a niche working differently, to escape the tyranny of modern day capitalism. But nobody is of the strength to get into office and un-do the changes that have been made to society by the neoliberal revolution.
Rarely does a application actually need to enable CORS. If all of your webcalls are from the same domain YOU DONT NEED CORS. (Chatbots/socket.io)

You only need CORS if you need the browser to act as a middleman to pass information back. IE: Credit Card Payment IFRAME

If you screw up CORS implementation it just means that anyone can read any information set by your website.

https://www.moesif.com/blog/technical/cors/Authoritative-Gui...
To answer some common questions:

Q - How much do you have to put in escrow to recover an account?

A - It's up to the user but they'll probably set it at a percent of the amount at stake. Or if it's a self-sovereign identity then it'd vary based on how important the account is to the person.

Q - What if you're too poor to initiate a recovery?

A - See the earlier question; the amount is configurable but would likely scale with the account size.

Q - What if I go on vacation?

A - You should be able to enable/disable this as a recovery process, and also configure the duration. So if you go on a month vacation, perhaps set your recovery duration to two months, or disable it entirely while on vacation.

Q - If multiple challenges, do you go with the challenge issued first?

A - Yes.

Q - Can't someone just make Escrovery requests for a whole lot of accounts and hope to earn enough back to make it worthwhile?

A - Profitability would depend on the amount you have to put into escrow and the percent of accounts that are lost. You want to set the amount accordingly so that isn't profitable.

Q - Can I use it to steal Satoshi's account now?

A - Since it didn't exist back then, no. In fact, it'll likely never be default on Bitcoin, but could be opt-in with smart contracts on something like Ethereum. One could also build it into other decentralized systems, for instance a decentralized and self-sovereign identity system that wants to have an account recovery mechanism.

Q - Can't I just attack/kidnap/detain the person for their challenge duration to steal their account?

A - It's not secure against kidnapping, jailing, etc. but if someone's willing to physically attack you, they're likely also willing to steal your laptop or beat you up to get your keys already: https://www.xkcd.com/538/

Q - What about front-running the challenge?

A - It uses a two-phase commit and reveal procedure to prevent front-running, like was used with name registration on Namecoin.
LightStep | Full-Stack Product Engineer Location: San Francisco, REMOTE https://lightstep.com/careers

LightStep | Software Engineer Location: San Francisco, REMOTE https://lightstep.com/careers

LightStep | Software Reliability Engineer (SRE) Location: San Francisco, REMOTE https://lightstep.com/careers

LightStep | OSS Engineer Location: San Francisco, REMOTE https://lightstep.com/careers

LightStep | OSS Programming Language Specialist Location: San Francisco, REMOTE https://lightstep.com/careers

LightStep makes complex software systems understandable, giving our customers confidence at scale. We collect, store, and query complex performance data so our customers can get insight from it. We're a 100-person company, growing quickly, and looking for hungry & humble engineers to build great software.
Put a tax return in. Don't claim any deductions. They give you $1K back. Happened to me three years in a row.
Interesting from a game theory perspective. In that context it seems like the discussion so far is making a fundamental error in figuring out how it would work, by assuming that the escrow amount would be some small fraction of the total recovery amount.

The correct way to do it would be to make it so the escrow amount is the same as the amount to be recovered or even more, and for the service to return that full amount plus the keys to the account upon a successful challenge.

So if you're the account holder, and you're sure you are, and sure you've just lost the keys, bricked the hard drive, whatever, you know for sure that you're going to win the challenge. The only issue is being forced to come up with the initial funds to make the challenge, which isn't too hard to do.

But for the speculative challenger that everyone's hypothesizing, they'd have to risk a substantial amount of money for a relatively small payoff. The larger the escrow amount the more unfavorable the bet looks to a challenger, it wouldn't take much to make the entire concept of a nefarious challenger obviously unworkable.
I have this invention that runs on solar power and water, removes carbon from the atmosphere day and night, lowers the nearby temperature of the Earth dramatically, is bio-degradable, and best of all, it self replicates.

I'm calling it Tree and I'll sell you it for $0.
Yes, I do.

It's not published, it has no path to get into the attention of researchers. There's nothing a researcher can tell beforehand that says that all that documentation is high quality instead of just random trash. Laymen language does not align with academics ones. There are huge personal biases on every academic area.

This happens all the time, by the way.
Surely, but if the effectiveness of advertising had improved , businesses would increase their reliance and their spend on it over time. While defense has no reason to , once you 've outgunned your enemies.
I love going to the cinema, but I avoid Cineplex here in Canada like the plague.

They lack basic showmanship like dimming the lights (every showing I've been at in the past seven years they just flicked the lights off and started playing the movie and then the credits roll and BAM, full brightness).

Couple that with Cineplex being an "extract-every-penny and don't re-invest" business. The top reviews for their biggest theatre in town include comments such as "the carpet smells like corpse."

Honestly, if bad content will lead to the demise of this company, I say bring it on. Hopefully Landmark will escape largely unscathed.
You can still do this. The Referer header is sent by default on requests, and you can make your server interpret it to do anything you want.
If you use fetch or XHR, yes.

If you just create an HTML form with the bank as action, fill in the inputs and submit via JS, no, because that's _navigating away_. This is also why GET requests that perform actions are dangerous, you can just embed them as an image to provoke a request. Which is exactly how zoom built their API. (they also then measured the size of the image to determine the response code, which is.... inventive)
Monday: Running local microservices and forwarding some others over Kubernetes
Feels like RTS games have not fully exploited the potential of multi-monitor setup. Was the AI ahead of the game? Although eyes can only focus on so much (screens would distract, I guess). Bigger monitors also would suffer from peripheral vision effect.
similar topics with additional inspiring comments:

https://news.ycombinator.com/item?id=20363297
https://news.ycombinator.com/item?id=10546797
nice :) I'm not saying it's not possible, and sometimes beneficial. But for me, it wasn't worth it.
Can I host my own, or can I build my own? Is that platform ready to be installed and reused by other organizations?
That makes more sense then. Yes, it will make sure not to send authentication data in that case.
I recently found out[2] about DasBetterC[1] and it seems like a super convincing way to get just C with classes and modules, as you say. Essentially, it removes the runtime and all the features that rely on it.

[1]: https://dlang.org/blog/the-d-and-c-series/#betterC
[2]: https://theartofmachinery.com/2019/04/05/d_as_c_replacement....
1- 4th grade or so

2- Typical 4th grader
I loved Santa Clarita Diet, but I'm also fine with them having cancelled it. I'd prefer shows just stick around for a few good seasons than get long in the tooth. I hope they develop more shows like it, though.
I see what you mean, evil.com could still make a request that includes cookies, which is why we need CSRF tokens. But from my understanding, it wouldn't be able to do that in a XMLHttpRequest hidden on the page. It would have to be a request from something like submitting a form which would navigate the user off the page. Is that correct? Of course it doesn't make much difference from a security perspective.
I was hoping someone would mention the warnings that capability people had raised about the CORS proposal. Every time capability security principles have been compromised it turns out badly.
I have read $somewhere that it accumulates in testicles.

And why would I coat surgical instruments?

Edit:
Just one article how healthy Teflon is:

https://fortune.com/longform/teflon-pollution-north-carolina...
Wow, this is one of the most hilarious court opinions I've ever seen.

"As for Van Den Hemel, Lutz, and Hansemeier, they are not without fault even though they acted under orders from the Principals. They were not merely assimilated; they knowingly participated in this scheme, reaping the benefits when the going was good."

"Third, though Plaintiffs boldly probe the outskirts of law, the only enterprise they resemble is RICO. The federal agency eleven decks up is familiar with their prime directive and will gladly refit them for their next voyage. The Court will refer this matter to the United States Attorney for the Central District of California."

:)
I was not sure, and you have made me go dig up my invoice to check. To my surprise, I actually found it. :)

And, the single-user license I have from June 20, 2010, was for... $24.95!

Maybe it was on sale when you bought it, or maybe the price dropped substantially after I bought it.
The 665 USS Guitaro was sunk at the dock at Mare Island. I worked on it when it came back for overhaul in the mid '80s.
This is also intimately connected with Ed Kmett's Guanxi project

https://www.youtube.com/watch?v=D7rlJWc3474
https://github.com/ekmett/guanxi

My understanding is he is using ideas from propagators and other places to make a performant logic programming framework in Haskell.
Dijkstras criticism is pretty revealing:

> The overwhelming impression is that the authors have had more experience than education.

Yes, Hamilton worked on the software which literally put a man on the moon. But apparently this is worthless to Dijkstra since they doesn't use the correct academic jargon.

https://www.cs.utexas.edu/users/EWD/transcriptions/EWD08xx/E...
Not GP but I Googled it and I don't think such a game was ever broadcasted. GP was probably thinking of AlphaStar vs. MaNa or AlphaStar vs. TLO.
Very few serious airlines are running exclusively Boeing or Airbus
On Android, NewPipe is much better than the Youtube app.
Q - What about front-running the challenge? ("HFT-style actors")

A - It uses a two-phase commit and reveal procedure to prevent front-running, like was used with name registration on Namecoin.
There's not really a function like 'approving the claim' if you're the owner making a recovery claim you have no access to the wallet/address to respond and approval is based on time. The only active thing as an account owner is responding to (denying) claims against the account.
Pro tip: projection and strawmanning aren't good substitutes for reading comprehension skills, critical thinking skills, and the ability to form cogent responses in a discussion.

It is my sincere recommendation that you work on the latter three, or possibly on your ability to simulate them when you aren't arguing in good faith.
+1 - This is a large part of the trouble. It leads to a lot of stuff being defined as the inverse of some other behavior - behavior that the developer does not have control or understanding of.
I was commenting on the parent saying "It's a sick reality.." That seemed a little over the top, when you can leave your employer if the situation isn't good. I know job transfers can be hard to find, and career moves are difficult, but it is reality that quitting your job is never impossible.
Thanks for at least considering it! The latter would work in my scenario (just copy until the next file doesn't fit, then pause and prompt for a new target). The files I work with are seldom larger than a few hundred MB, and many are only a few dozen KB. Even in the case where a few GB are wasted per disk due to unusually large files showing up, a few GB is nothing compared to the overall size of drives these days. I routinely waste at least that much when doing similar multi-disk backups manually by selecting files which fit. Simplicity and ease of use are big benefits when it comes to backing up hundreds of TBs.