skysight-inc/HackerNews huggingface dataset:
That’s a fair point about creating Stipe tokens.

In my experience (processing several thousand payments with Stripe daily) when there are blips they do seem to be isolated to specific endpoints/entities.
You also dont know how good or effective the cosmetics are
This is discussed in the post text, but happy to elaborate here in more detail here! Here is the patch links from Firefox[0] and from Chrome[1] which they specify that active mixed content policies do not apply to the localhost, because the w3c specification was updated to specifically allow this behaviour[2]. You might have to use 127.0.0.1 directly. So yes, it is allowed.

If for some reason that doesn't work for your app, the post also mention two secure alternatives: the native client can install a self-signed cert, or you can use a browser extension with the native messaging API. You touched on this too!

My point here is not the specific example solution -- there's lots of alternatives and yes it depends on the situation and browser support requirements. But NONE of them are a reason to allow requests from every origin.

[0]: https://bugzilla.mozilla.org/show_bug.cgi?id=903966

[1]: https://chromium.googlesource.com/chromium/src.git/+/130ee68...

[2]: https://github.com/w3c/webappsec-mixed-content/commit/349501...
You definitely nailed it on the head. You are awesome! :)

Thank you for being gracious, understanding and thoughtful about these issues. Also, thank you very much for the well wishes! I really appreciate it.

As for more open-ended stuff, like procedures, I tend to look at the "best-case scenario" data in the literature, and use them as a reference. Then I compare them the data in general across the spectrum for that procedure (as best as possible). If I determine there is a lot of variance (often there is) it can be a red flag. Obviously this is not reliable, and it can absolutely fail. There are a lot of intricacies involved. But, it is a starting point.

In terms of medical devices, I can read a patent and I can usually tell if the technology is legitimate or not, in terms of if "the technology is there versus it being a gamble whether it works or not" (which you would have to look at clinical results data and more to make more determinations).

In terms of telling if an electronic device is gimmicky or not, versus promising technology (also applies to medical devices, but not completely, as it is interfaced with the human body, usually): I read patents too. But most importantly, I can tell usually just by the specifications alone of the hardware. If the combination of hardware is not adequate for the claims they are making (in order for the device to actually be reliable), there is no way that the device will be promising. It will meet the "gimmicky" criteria. Of course there are other ways that medical devices can be messed up (such as product design and/or software) but that is becoming less common (except for perhaps, the risk of cyberattacks) as there are huge investments on the product. In that respect, it is best to look at the overall reputation of the company and the previous iterations of often (very) similar devices. But, being the number 1 best seller (often means they excel at marketing) does not mean they are best. I would rather have my insurance cover something that is innovative design-wise that took ingenuity (and is reliable and solid) than incentivize a company that would rather do "software upgrades" (far less risky) as "innovations" that they market to be groundbreaking (when they are often not).

Anyways, if you have a colleague or a friend who is an engineer, ask them what they think about X, Y, or Z devices, and have them get back to you. Engineers do not play to things like corporate politics and will usually give you a fair and relatively unbiased opinion. They are, after all, applied scientists. It can never hurt to have such input, and usually it is very good.
I'm the first author of the paper, happy to answer any questions
What regulation prevents that from being built?

[Edit] The Williamson Act? (https://en.wikipedia.org/wiki/Williamson_Act) "The Williamson Act of the US state of California (officially, the California Land Conservation Act of 1965) is a California law that provides relief of property tax to owners of farmland and open-space land in exchange for a ten-year agreement that the land will not be developed or otherwise converted to another use."

"The property is under the Williamson Act, meaning the land will not be developed or otherwise converted to another use for a number of years." (https://www.sacbee.com/news/state/california/article23239941...)
Wow, what mailing lists are you on that give you weekly tickets to mainstream cinemas? I'd love to get on that.
Best of luck in your experiment! Please consider writing up your thoughts afterwards, and perhaps sharing them with HN.
Prediction is hard, especially about the future!

What's clear is the data about the recent past, and the trends are very good, both for accidental and deliberate death (among other things) on a time-scale of decades to centuries.

There are indeed some reversals (in the last few years: some kinds of crime, pedestrian deaths, opioids) which the optimists hope will be short-lived.
Cool. Found the paper: https://arxiv.org/pdf/1609.05337.pdf
I don’t think this change needs obey any hand-wringing about lost efficiency. Lose the efficiency. Gain a deeper relationship to community, loved ones and self. We’ve been through, as a culture, more than enough self-brutalizations for growth. Enough. Time for a new metric to meet a new understanding of the world.
Appreciate the upvote, but...

> Natural selection works on ecosystems too

No, it doesn't. Ecosystems don't reproduce. Natural selection works on genes (and memes). See Dawkins, "The Selfish Gene."
Same! I couldn't believe it either.

If you're interested, look into Luckin' Coffee too - their rise to power is remarkable.
Nightshade specifics start on page 21 (section 3). The first bit is just an intro on sharding.
Why not competition with forwarding a.k.a a thin wrapper with the extra comparison method?
Theres a huge spectrum between SPAs and pure js-less apps.
I'm confused as to what problem you are solving. If this is to recover a centralized account like FB, having them add 2FA is far simpler in every way. FB is already centralized and not anonymous so making its recovery decentralized and anonymous makes no sense.

You specifically call out that Bitcoin has no account recovery and > 20% are lost forever. You never talk about how someone might recover a bitcoin private key. So how does this work for Bitcoin or any other crypto?

Even if it did work, it doesn't solve the issue of the initial person being able to set a value on their account and the price a challenge you must offer. If there is a $1B account, someone can easily just make $0.01 challenges all day long. Now that this is luckily decentralized, I can run a node and catch an unsophisticated user's IP after a bit of monitoring. Now I only need to physically locate them and EMP their house and the $1B is mine. There is far too much hand waving in this idea and paper to be taken seriously.
Since Skinner recommended gorillas: https://youtu.be/P9yruQM1ggc

... I had to check [0]: at least mountain gorillas can survive temperatures below freezing.

[0] https://www.worldwildlife.org/species/mountain-gorilla
> Google been proving to be a very poor business partner

The company is more parasite than a partner. It'll punish you severely without remorse for not following its rules. Good luck trying to open any kind of dialog.
Announcing “Shape Up”, a deep dive into how we work
The biggest issue here is failing to relate to your intended audience. (IMHO)

The type of people that lose their secret keys are the type that don't know to back them up in the first place.

They would never know to look for a service like this, and if they did, they would at that point also likely understand the value of their private key, and come up with a means to keep it.

The biggest problem with this whole project is the fact that people need to trust you with total control of their money.

That's a big ask .. and that you're asking them to trust their money to your coding skills, that you're going to pile lots of private keys in one place (making you a target), and crossing your fingers you don't run across persons smarter than yourself.

If you get even a few people to use this service, it's going to end perilously.
Boeing deserves to get pushback like this.
They really let everyone down, but most problematic was not having public safety foremost in their design of this airframe. That is inexcusable.

It’s too bad there isn’t a better whistleblowing mechanism for these kinds of questionable design decisions for critical infrastructure.

I can only hope the certification process will become more rigorous and require the approval of multiple aviation regulators before it’s declared airworthy.
It prevents someone with the following pseudo-javascript on their random website (or injected from the ad network) from working:

onPageLoad()
{
for ( x = 1; x < 10000; x++ )
{
load_page(https://facebook.com/newpost?to=world&message="My mother's face resembles an unwashed buttocks");
}
}
I d really like to see a serious study on the effectiveness of advertising. Businesses have been spending the same % of their profits for advertising for a century. I wonder if that means the effectiveness has essentially not changed.
I sort of get it and yet even when I'm sure I've configured it correctly, I'll hit road blocks in Safari, for example, when it works everywhere else as expected. It is such a frustrating experience.
Taboola is scum.
At my work, we do 35 hour weeks in the summer, and it’s extremely nice. What ends up happening is I schedule all my appointments (doctor, car repair, etc) on the “summer Friday” afternoon, and keep my personal life moving along guilt free.

During the rest of the year I just miss work for those appointments, which isn’t the end of the world, but I miss the guilt-free aspect of it.

My gut feeling is that the dev team puts out the same volume of work per month in the summer as we do the rest of the year, but I don’t have any data to substantiate that.
I believe the team in question needs to support something in person so they do a split.
I do not use social media myself, but I saw that story as it was posted here. I get the feeling that there was some bad behaviour in that particular case (while Kardashian at least has some humans).

The t-shirt account can't get past 200 comments with 2.6 million followers? Sub-0.001% engagement screams purchased followers - you typically get more than that in spam comments or shoutout-begging alone most of the time I've seen if they are humans...

I am also inclined to believe this even more so due to scrolling through the follower list for under a minute, based off usernames. Another thing is that while scrolling through, some hypermajority appear to be either India, Middle Eastern, or CIS countries, while she has never written a description in any of those - possibly the vendor was also difficult to order from or ship outside of the US or her home country otherwise.
My first reaction was "I bet this violates the ToS".
The biggest problem if you really wanted to do this is that gross and net work aren't the same. And depending on the job, they can be really, REALLY different.

My wife is a part-time accountant and for her it's working out nicely. She spends maybe 2-3 hours every week on generic stuff like coordination, meetings or bureaucracy which she would also spend at 40h.

For Engineers, this ratio is absurdly different. To speak in a cloud metaphor, Engineers are limited by I/O bandwidth and not by compute or RAM.

Because you need to learn so much about general coding, languages, algorithms, architecture, frameworks, domain specific expertise and whatnot AS WELL AS coordinate with stakeholders, on-location and upstream contributors, reviewers, managers, architects, QA, ... — they spend maybe 2-3 hours net of _actually writing code_.

The rest of the week is spent on how and why to write that code in the first place.

Once I understood the fundamental difference, the allure of crunch mode made a whole lot more sense to me. For 10-50% more time, you can get a whopping 100-500% in output for a short time. Compare that with the negative efficiency of adding more people (which, as we all know, will make the project later).

A 30h workweek would work into the opposite direction. For 25% less time, you might get 50-70% less productivity.

Not gonna happen. Sorry.
> Perhaps with greatly increasing periodicity with increasing age.

We should do this based on facts, not anecdotes.

This data suggests we should first be concerned with the training and testing of new drivers. https://aaafoundation.org/rates-motor-vehicle-crashes-injuri...

According to this, people 60-69 are the best drivers. 70+ are decent across the categories ("All crashes", "Injury crashes" and "Fatal crashes") except those 80+ kill themselves at an exceptional rate (but not passengers or others for some reason).
There is also a free game, A Slower Speed of Light. [1]

[1] http://gamelab.mit.edu/games/a-slower-speed-of-light/
> I'm pretty sure you're incorrect - requests to sites different from the one you are currently on will not include auth data by default because of the same-origin policy

Not necessarily true. You can have Javascript running on evil.com that submits a form to banking.com and it will send your session cookies for banking.com along with the request. It's just that evil.com can't read the response content.
I try to follow attractive people at times on there, but I quickly end up unfollowing them once I find that the misleading fame has gone to their head... Most of these "influencers" only post selfies or product promos and it gets really boring after 3-4 images. :(
Absolutely they do. Not all of them, and it's officially an overcrowded market. There's a large range of what an influencer is, what he/she does, who his/her audience is, and, most importantly, how he/she is promoting your thing. But to assume that the average human being does not do things because others do them, doesn't desire to be someone different, and is in full control of his/her mind, is nothing short of foolish.
Yes. You would have to disable it on all the clients that you wish to keep ad blocking on.
Is this the same JOE editor I was using when I first started using Linux around 1999?
Sincerely asking, but what is the innovation? These have existed for a very long time: https://www.theparkcatalog.com/9-bike-single-sided-grid-bike...
That's how I feel about Silicon Valley (the TV show), despite liking it a lot. It had a strong story in season 1 (and somewhat 2), and it has plenty of great jokes and relevant commentary. However, I cannot recall anything about the overall storyline past season 2 at all, because the rest of the seasons follow the structure of:

episode 1: set up the direction for some conflict/direction of the season.

episode 2 - episode n-1: a bunch of filler material with wild movements and swaps with no particular direction.

episode n: after all the wild moves, the characters and the story ended up back in pretty much the exact same place where it started.

If you care just about the story, you can legitimately skip all seasons after 2 and jump straight into the newest one without missing out on any actual story development, minus some minor references and newer characters. Which is a shame, because of how strong and directed the story in season 1 was.
My point is that doing nothing causes copy semantics to be generated by default. It requires some action (specifying move constructors, for example) to override the silent generation of copy semantics. In other words, if you're not explicitly thinking about whether copy semantics are appropriate (or even legal!), then C++ decides for you that they are. That's not a good default.
Sounds like a great idea. An AI arms race.

Lots of smart people...Kids in high school competing could motivate them to learn more math.
'Sharklet' is a material used in the hulls of ships that inhibits bacterial growth. It was inspired by shark's skin.

From their homepage:

> Sharklet is the world’s first technology to inhibit bacterial growth through pattern alone. The Sharklet surface is comprised of millions of microscopic features arranged in a distinct diamond pattern. The structure of the pattern alone inhibits bacteria from attaching, colonizing and forming biofilms. Sharklet contains no toxic additives or chemicals, and uses no antibiotics or antimicrobials.
I actually said in the paper that accounts can enable/disable it, and customize their price and duration depending on their use case. Also, I said that it's not secure against kidnapping, jailing, etc. but if someone's willing to physically attack you, they may also be willing to steal your laptop or beat you up to get your keys already: https://www.xkcd.com/538/
Now imagine how slow development would be in your hypothetical world. Most of the apps and sites you use wouldn't be build because the cost of development would be so high.

We throw tons of CPU and memory at these problems precisely so we can build fast.
"Saudi airline gives Boeing the chop"
That is an exaggeration. We have the ability to choose careers and jobs, so we have the ability to choose a healthier lifestyle via career moves. If someone has locked themselves down with debt, children, unhealthy stress levels, etc. an employer is not the one that is held responsible at the end of the day. Part of being in a society that values the individual, is that the individual gets the praise in good times, and must own the blame in bad.

If you believe your employer should be taking better care of you, you can vote via leaving your employer. Who exactly should be responsible if not yourself, and how? Many people on HN sit at desks most of the day doing tasks that are laughably easier than what 2, 3, 4 generations ago were doing.
Several times in Python I've used the built-in CTypes library to cut down the memory footprint by using giant Arrays of (literally C) Structs.
The number of hours one can work a week productively will vary based on individual and lifestyle.

But to me, currently working 60 hours in my startup (sleeping well, eating well and exercising, without children and with a good social life). 40 hours does not seem like much. Am I missing something?

If I worked only 9-5, I would pick a side project, as I would feel like I wasn't challenged though.

I understand having a family would change this. I can see how if I had 3 kids, a 30 hour week would be a blessing.

But we can't assume the same optimal number of hours for everyone. 40 hours is nothing for a single person with few responsibilities.
> Everybody wants to blame some amorphous "X" culture for their problems, though

We don't exist in a vacuum. Any number of things could be holding you back, some of which you don't actually control.
Do you need to address every byte in your memory? If all your Python objects are at least two words in size, or more, then no, you only need to address every 16 bytes or so. So shift your whole pointer right a bit and you can address more than 4 GB of objects in a 32 bit pointer.
Lots of brands seek exposure so direct sales from an ad may not be likely. You might not be wanting to buy something in the moment but next you are looking for something you'll associate that brand.

It's quite hard to track though some progress has been made through tracking you online on longer time scales. Most people dislike this type of tracking across channels cause we really don't get much out of it besides being bombarded with ads from the same company.
Some do. My girlfriend has purchased clothing after seeing an influencer's post on Instagram. Granted, she has to REALLY like the piece of clothing to buy it.

Regardless, it's infuriating to read hotels, airlines, clothing companies and others throwing money and freebies at people just because they have a high follower count. It's also sad to watch people from my hometown become walking advertisements -- one girl recently started shilling for Disney -- and try pushing their "brand."
In Javascript you can make anything into a lazily evaluated expression by wrapping it into a function (sometimes called a "thunk").

// eager

new Promise(resolve => resolve(foo))

// lazy

const bar = () => new Promise(resolve => resolve(foo))

An executor would be something that takes n functions that return Promises and calls them.
I think that Chrome allows calling http://localhost from https domain. Other browsers should fix that instead of every application installing their custom certificates into trust store.
It is funny - but to add a little nuance here, it sounds like they're reinvesting tons of cash back into R&D. If they were not reinvesting as heavily, they would be cash positive.

> Dropbox has demonstrated impressive growth since 2015, roughly doubling the number of paying users and revenue. Dropbox became cash-flow positive in 2016, but recorded a loss of $111 million that year after pouring money back into its product development efforts.

https://qz.com/1214822/dropbox-is-filing-for-a-500-million-i...
The US already has full control of the global currency, what could this possibly buy them? They want to be able to embargo nations' currency and destroy them doing that economically, this would get in the way of that... They would need FB's blessing to properly deprive citizens of other countries whom they are targeting of financial resources. So obviously it's a non-starter.
I admire your resolve in your combat.

When you mention bay leaves, do you mean laurus nobilis or a different species? Could you specify the Latin name please?

I tried coffee powder at the back door to keep ants out.

I tried egg shells to protect our strawberry plants from beetles and caterpillars.

Neither worked... well, maybe they somewhat worked, who knows?
Is your question tailored to anecdotes or towards industry data?

1. I can name a handful of products that I've bought because <insert some triathlete / olympian> uses them. Out of 6 or so products I've bought I've only had bad experiences with 1 of them, otherwise they all were

2. Sales tactics are basically tried and true throughout time. It's no coincidence the most effective e-commerce techniques are scarcity and social proof[0]. Genuine influencers have the ability to affect social proof on a massive scale.

3. I loathe FashionNova, but they are a grade A example of how effective influencer marking can be if done correctly at scale[1]

4. Scaling influencer marketing is a delicate balance. It's just not programatic (and never will be) like placing ads on Facebook or Google.

[0] - https://www.qubit.com/wp-content/uploads/2017/12/qubit-resea...

[1] - https://www.businessoffashion.com/articles/news-bites/influe...
Like we've reacted when scientists told us about rising co2 levels 30 or 40 years ago?
That's nowhere near the value of bikes you'll find on the street in the Netherlands. The average resale value is going to be much much closer to 50€ than $1500.
> What was downtime of your telephone line over last 5 years

Assuming they even have a 'telephone' landline, are they even measuring?

Plus, telephone is old tech. This is apples to oranges. You know what else hardly ever fails? The water supply to my house. But people have been building aqueducts since Babylon.
What would happen if everyone shifted to a 4 day week, or let's say more of a 32h week?

Would we suddenly be unable to produce and offer all the goods and services needed to sustain ourselves as a society? I doubt it. I think we'd all just be happier working less and enjoying ourselves more.

It is different though if only some businesses make that shift, because then they might be uncompetitive against other businesses. And in today's global economy, it is harder to say the impact against companies in other countries where there is already a big gap on the work week.
The marginal benefit from making a site available to the relative handful of people who refuse to run javascript is miniscule. The marginal cost of doing so is huge.