skysight-inc/HackerNews huggingface dataset:
As much as I agree with you, I don't see this happening any time soon.

See, Baidu and Yandex already existed for years before reaching the size they're today. Brazil had it's internally developed search engines before (Cadê, TodoBR, Aonde). Some of them even ranked higher than Google in the early 2000s.

However, with time they got out of business or were bought by Yahoo or Google itself.

And when you think about it, those business (Yandex, Baidu) now offer more than just search - Yandex offers email, maps and more; Baidu has Cloud Storage, Browser and even hosts a Wikipedia-like website - or have some degree of government ties at their countries - Google being banned from China; Yandex reportedly handled information for FSB.

You need to have all those advantages to replicate the success case of Yandex and Baidu. And there's one of them - time on market - that you can't buy.
If a native app can request any resource why shouldn't a web app be able to do that too? Does it matter whether that app runs in my browser, Electron (which can easily bypass CORS policies) or whatever other runtime? If it does then CORS restrictions should be put in place at the OS level, if it doesn't they should be removed altogether. There are a ton of other ways to make sure you don't "give your stuff" to unauthorized parties: authentication, CRSF tokens, hash validation.

Seriously, if it gets to the point of having to write "{Class of professionals} don't understand {Obscure restriction that doesn't make much sense nowadays}" it's likely not a security issue anymore, it's a UX issue (with the developers being the users). At the very least prompt the user to (dis)allow CORS when a request is being made, similarly to how the user is warned when running an unsigned executable on macOS.
After reading Debt by David Graeber, I felt like the treatment of early economics in Sapiens was a bit superficial. This isn't to say that I think one is "wrong", and I'm certainly no expert in the area. Debt made me think in ways that those parts of Sapiens didn't.
Some of the purplest prose I've read, plus humor so dry people are missing it. I think the author achieved what he was going for.
You shouldn’t assume that a post titled “Developers don’t understand CORS” will only be read by people that understand all the intricacies of CORS. :) For everyone else, the need for a POST request [edit2: as well as a non-form Content-Type] may not be immediately apparent.

(Edit: It’s true that a proper RESTful API shouldn’t be using GET for operations with side effects anyway, but that’s different from knowing that avoiding it is mandatory for security.)
We created a fitness app that counts all your reps
I really don't think that's true for high-level professional players. Sometimes, yes, it's difficult to immediately count exact units compositions. I don't think professional players are getting confused by unit designs or finding it difficult to identify low-health units. (Don't pros play with all health bars on?)

It might be "unfair" for some almost purely number-based confrontation like a phoenix-versus-phoenix battle. But are we really that impressed by testing which human happened to be better at estimating the number of stacked phoenixes? To me, that's not what's interesting about competitive Starcraft 2. I'm more interested in micro, like pulling back injured units, or choices like "it makes sense for me to force us to trade out our phoenixes right now even if I lose the battle."
Yes, we do. Empirically, there have been far fewer memory safety problems in the Rust components of, for example, Firefox than there have been in the C++ components.

That particular memory safety issue was not a security issue, because it did not cause any problems in actual software. Rust is very conservative about issuing CVEs for any issue which could conceivably be a security problem. (The equivalent would be if C++ the language issued a CVE because the language lets you clear an array while you're iterating over it. The CVEs for exploitable problems that this kind of thing enables are for the vulnerable software, letting C++ off the hook.)

In my opinion, Rust is too conservative and shouldn't even call those things security issues until they affect real products, because it leads to misunderstandings like this.
The story ends with:

"The drop was so precipitous that I saw in just a few short seconds I would go abruptly vertical, vanishing briskly down a long dark well. It was the point of no return, a water park in 2019. And for reasons I struggled to explain, I desperately missed my family. Look how far the fathoms have taken us. Look how far we’ve strayed."

Sounds like a roundabout way of saying he chickened out of riding the biggest slide in the park after seeing the drop. But I have no idea what those last 2 sentences mean.
I think my personal brain-fog when it comes to web security is that it isn't just protecting the server from malicious clients, or the client from malicious data, or the user from a malicious client, but all of the above and then some. The attack vectors point every-which-way and it can get confusing whom you're trying to guard against whom in a given case.
Your BTC value is a bit outdated.. 1 btc in usd --> $732
These are from years ago, and as mentioned there are two other alternatives discussed. There's no excuse to not checking origin at all. They could have even used the image hack and then checked the origin.
Yeah its awesome. Just make sure you have an organic solvent respirator on when you use it. Its pretty nasty stuff.
I've seen a lot of comments like this on HN since earlier today regarding the Stripe API downtime. It's very positive and I'm glad to see it in response to an event that usually garners frustration.

Never used Stripe's API myself, but it sounds like they are vastly reliable beyond these blips.
Ran into this one in the wild when it happened, before stripe status had even tweeted about it. I was trying to order doordash and got a "Could not deserialize JSON object" error when adding a credit card. Hope this is fixed soon, the girlfriend and I are very hungry :(

Edit: update if anyone cared, API seems back up and we have ordered food! :)
> If for some reason that doesn't work for your app, the post also mention two secure alternatives: the native client can install a self-signed cert, or you can use a browser extension with the native messaging API.

(Also you might want to verify you were using 127.0.0.1 and that you had the headers correct)
Progressively Uncover Code
I mean... There's many many products like this already and I don't understand the point of this article.
The hatchet wasp lays eggs in the cockroach egg cases.

https://en.wikipedia.org/wiki/Evaniidae
Is it much of a limit for top professional players either? From what I can tell, they spend a huge portion of their time staring at the minimap anyway, to find the portion of the screen is the best place for them to focus their attention.
Pretty sure you can still monkeypatch the class instead of each instance, but I’m too jet lagged to think it through at the moment.
It's important to note that Greenwald is sponsored by Omidyar, not independent with "FU money."
Wow, this is really amazing. I've always felt like 64-bit pointers were a huge waste of memory, since many small tools need well below 4 GB. Cache is always going be relatively small (unless semiconductor/transistor fabrication costs drop dramatically), and smaller pointers result in better cache usage, and consequently fewer cache misses.

> Sadly, x32 was "very custom" and very hard to support. Last I heard x32 is being phased out from Linux kernel.

This is really sad to hear. Do you happen to know of any kernel discussion threads on this besides this one[1]? (I'd love to chime in, in support of the X32 ABI.) I'm a little surprised honesty, as Linus has mentioned multiple times how important it is to him that the user-facing ABI remain stable.

[1] https://lkml.org/lkml/2018/12/10/1145
Theres a mute button on the echo. You can turn voice off just the same as you can on a phone.
The same could be said about operating systems. In fact when just replacing "Browsers" with "Operating systems" your sentence would still hold true.
Ya - I'm seeing the same thing on the customer endpoint.
Sure, but 25 + 10% = 27.5 for:

- Soulver, according to the screenshots (and the goal of this project seems to match Soulver's behavior),

- the calculator on my phone,

- KRunner, the launcher in KDE, and KCalc, its calculator

- gcalc, the Gnome calculator

- qalc, that shows "25 * (110 * percent) = 27,5".

- The TI-106 solar calculator that I happen to have [1].

Thinking about it, we are probably talking about some kind of "+ %" operator, where x + y % = x + x × y / 100.

Interestingly, 10% = 0 for the TI-106 (but 25*10% = 2.5). % alone does not seem to mean anything for it.

This little calculator will probably outlive me.

[1] http://www.datamath.org/BASIC/LCD_Modern/TI-106_2.htm
Develop with React but use something like Next.js to do Server Side Rendering (SSR)?
I want one. Specifically I want one that includes a directional microphone to detect noise violations, then automatically tweets the lic plate number, time, street, direction to the police, and then continues to collect the information providing predictive tweets to the police (Lic plate XYZ is likely to pass at location A at time Y with a volume 10x the legal limit). I live next to a noisy street and sound insulating my bedroom is over $10k. This would be a much cheaper solution to the neighbors crotch rocket at 4am.
Oh man please take over for Gregory's Coffee in NYC. LevelUp is a pretty bad UX experience.
U.S. to probe French plan to tax tech companies
Here's the link to play Doom3 in the browser.

http://wasm.continuation-labs.com/d3demo/
"In fact, median wages for writers are dropping quite quickly, down 23% from 2014 to 2016, which is a similar amount as the fall in earnings for book literary authors after Amazon launched its vertically integrated kindle e-book reader."

Couldn't this simply be an artefact of more authors entering the market (and filling out surveys). It doesn't seem conclusive as a scare metric.

As for the general article, at the moment more art seems to be produced than ever before. No matter what endgame Netflix has in mind, I don't see how they could achieve a monopoly situation as with the Hollywood firms if the past. There is now the internet, everybody can publish.

Diacoverability, maybe - so they would become the Google of movie search engines? How would they prevent for example Google becoming the Google of movie search engines? Google retains its dominance because it is also pretty good, so far.
I thought the slow burn of older movies was because of the cost of printing and managing the prints.

My understanding is that it was a substantial investment for a movie, which meant that releases had to be staged - you wanted the most bang from each print [1][2].

With digital theaters, this is no longer an issue, the cost is up front with the expensive projecting equipment.

[1] https://newrepublic.com/article/119431/how-digital-cinema-to...

[2] https://www.latimes.com/entertainment/envelope/la-xpm-2014-j...
So the author was trying to.. demonstrate Poe's law?
Those are TV series for the most part. What's their movie budget?
As of 22:00 UTC, stripe was down again. I think it's up now.
I do, in London - but it's only about a 20 minute cycle.
quote:"If you feel inspired to do the same, simply add the following to the head of your pages to stop Google from crawling your website:<meta name="googlebot" content="noindex">" </endquote>

Hahahaha. Hey, I found the joke of the week and is only Wednesday. If you think for one second that a meta or robots.txt is stopping google to crawl your website you're
naive.
Could Regulatory Backlash Entrench Facebook’s New Cryptocurrency Libra?
That one ended up with Bill Gates autographing a case: https://www.engadget.com/2008/03/22/even-happier-ending-for-...

I guess the takeaway is that if you document everything and complain loudly when something goes wrong you might actually get decent customer service.
It wouldn't be perfect, but there are tons of services that can generate an RSS feed for a specific twitter user. It looks like @stripestatus only tweets when there's actually an issue (aside from updates on current issues)
Were you in the HH facebook group back around 2016? When I read this article I was thinking of some guy there who said he got a new case every year and preserved the old ones as a memento.
3M 1080 is great stuff - I avoided clear vinyls however as i found they lost the metallic look due to them being a little too glossy, even with the matte ones.
Even Cordova (which basically runs a web view on mobile) has a plugin to bypass CORS (https://hackernoon.com/a-practical-solution-for-cors-cross-o...). Are we entirely sure that the benefits of disallowing CORS by default outweigh the annoyances? Is there any study on this?
Linode Democratizes Cloud GPUs: Brings Powerful Nvidia GPUs to Its Linux Cloud
I don't have a smartphone (never have) and I don't take my dumb nokia with me unless the battery is out.

You're right. But it doesn't mean that these home voice assistants are okay. It just means there's a much, much worse problem with smart phones people aren't willing to acknowledge. And those of us that do and act accordingly are treated as weird paranoids.
Nice!

However, imo cases add too much bulk - hence why I've never used them. The whole point of the MacBook (especially the Air) is to be sleek.
It's good to know about it, for sure. But, at the end of the day, profit makes profit-driven things happen. It's important to know about and advocate for more important values than profit.
Somewhat interesting article. A little about cutting edge house buying and mostly about one company involved. Grossly misleading title.
This is exactly right. Different parts of the business have different security scopes, and different domains are the easiest way to keep things separate: make the browser help keep data separate, and not share things across the organization.

This can also reduce cookie size, which adds up.
No, they will operate as they have always operated, and simply be owned by Google or Amazon. They are currently operated by unaccountable billionaire families; in the future they will be operated by unaccountable billionaire families.
I've seen a couple of these in Helsinki with the cut-out shape of a car, so they take the space of a parked car but fit a number of bikes inside. I think it sort of hammers the point home in the city centre...
Thanks! I really dislike the cargo culting you see in a large chunk of the hackintosh community which is just “try this bootloader option” or “install this random kext”. I hope that as I learn more about how these things work that I will continue to document the entire process and give explanations for why certain hacks are needed for things to work.
It might not be as ideal as an organic friendship buI wouldn't say it's a bad idea outright. Only a handful of my friends would call themselves entrepreneurial, and those who do are pretty deep in their own domain-specific startups. My criteria for a cofounder match is 50/50 expertise and personality match, but that slides based on how complementary our skill sets are.

Ex: I'm building a new mapping product right now and know very little about image signal processing, but was recently introduced to a CV engineer who blew my mind when we were introduced on LinkedIn. I'm not sure we'd hangout had we not been intro'd, but we get along just fine and her ability to instantly illuminate concepts that had been taking me weeks to grasp is exactly what I need in an early-stage startup cofounder. I think the timing risk of waiting for the "right one" is much greater than finding someone who might not check all of the boxes but meets 90% of what you're looking for. As always, YMMV.
Haha true! It's tricky to find a balance between a short post that nails home a point and a complete guide that hits all the nuances. I definitely intended the former here but I think this is good evidence there is room for the later.
Maybe I phrased it poorly but that was my point. It's free to me but when it comes to box office numbers they can still claim record breaking figures partially off the back of it. As far as the economics stand right now everything is going good but this kind of thing will have a long term knock on effect towards the perceived value of a trip to the cinema.

These companies won't endlessly do that, there's weird stuff going on with the numbers to prop up the unsustainable cinema prices and it isn't going to last.
I'd say the industry is increasingly reliant on opening weekend hypefests leading to crazy preorder rates too, which actually might hold up even though I find it grim for wholly different reasons.
U.S. Launches Probe of French Digital Tax
On the contrary, most changes proposed reduce the quality of life, reduce choices, and require rationing and rationed distribution of some sort.

The current situation will cause widespread mortaility in person years counts if continued. Particulate matter and NO and effects on asthma and childhood mortality are well understood. Simply replacing charcoal with more efficient fuel in rural settings had massive upsides to life expectancy. So, while I absolutely agree your and my life experience will have a smallish decline in choices and quality in some senses, at the levels of populations and nation states it's less clear.

What's your problem with rationing? Didn't it actually improve overall diet and health in the UK in The 1940s?

You've driven to an extreme. Reductionist arguments imply an inability to hypothesize alternates on the path. What about median path reductions in plastics and oil consumption and replacement of individual transport with mass transport? I don't recall a car being in the constitutional rights list.
Could this save the barrier reef or is it too far out?
Insofar as this rhetorical framework is concerned, they're actually sanctioned, not unsanctioned.

Banks and credit issuing institutions are heavily regulated and have a variety of criteria that must be met to legally operate in that capacity.
From how these contracts were explained to me, this is a win for Boeing (probably).

Most of these contracts have an initial deposit then payment on delivery however if the order is cancelled, Boeing keeps any deposit and possibly some or all of the full payment (as a cancellation fee like with most cell phone contracts).

Now Bowing already has the initial cost of manufacturing partially or fully covered AND gets to sell the plane or simply not manufacture it for pure profit.
Many in SUS haven't started a real company yet...
> that is strategically critical to the world's largest economy and sole superpower (the one that also happens to have a $750 billion military that depends on Boeing)

This part is really all that matters. Boeing isn't a company as much as it's an organ of the state. Regardless of how inferior their engineering is, they won't be allowed to fail.
Your opinion has a huge amount to do with your job and your employer.

Appeal to authority may be a classical logical fallacy, but it's a highly effective one and is used by many people to infer the merit of an opinion rightly or wrongly so. Yeah, I know it's weird, that people would associate a comment one person posts with the voice of a trillion dollar company. Just happens sometimes.

Moreover I have nothing to gain by trying to "make this into" anything.

Believe it or not, I actually hoped it could be of some help to you as another data point - as far as all the things you take into consideration when choosing how to exercise your bill of rights free speech, which has nothing to do with your corporate free-speech. The latter of which unfortunately has cost many people dearly.

With respect to Microsoft, I'm certainly not making any comment about them as a company one way or another. That wasn't the point because, this concept applies to most large similar tech companies.

Things do change rapidly at such companies. Fwiw, I have done your job, your bosses job, been the janitor, and a few other things there. Things may be different now, but i'm not making the most possible uninformed guesses just to mess with you.

I sincerely hope the truth is known and that there are no negative repercussions for you personally.
My prediction is that no matter what limitations you add, some people will always reject the notion that a computer can be competitive with a human at anything that humans are perceived or expected to be uniquely good at. In chess, there were decades of resistance to the idea that computers were truly competitive the best human players in a "fair" match, even though that game has little or no physical component (I suspect this persists to this day).

For some people, either there will be endless litigation of every tiny physical difference between the computer and human player that makes it "unfair," or the premise will just be abandoned and we'll hear things like "well, yeah, computers are great at RTS games, but RTS skill isn't really a sign of true intelligence."
Powell says the strong jobs report last Friday did not change the Feds outlook
None of which invalidates these concerns. You just fall into category 1 or 3.
Unfortunately, we lost the chance decades ago when C became popular.
Actually, the proper way to restore accounts is:

Have M of N existing private keys sign that a new public key can be given X rights. (Usually M should be 1 or 2 depending on security.)

This certificate can be posted in a “keybase” style merkle tree or just send the latest one to whatever gatekeepers check it.

You can also have one MASTER key (derived from a passphrase you know or store somewhere privately, or in a secure enclave unlocked with biometrics) that is required in order to do any really sensitive operation like adding or removing access to resource X (eg your identity somewhere) for a new public key.

So you can give K > M public keys to K friends and if you lose ALL YOUR DEVICES then simply get M friends together and togethee with your MASTER KEY you can grant access to a new public key to recover all your stuff.
There's also NetSurf <https://www.netsurf-browser.org/>, which is in active development and which is almost as lightweight as Dillo, while having better support for CSS3.

It doesn't really support JS yet - it's included and you can compile it in, but there's IIRC no DOM still - and 3.8 behaves a bit weirdly with word wrapping and fonts (I think the latter is because they are compiled in the executable), but it works pretty well, and it works even outside X: it has a framebuffer version.
I don't like that the article implies cyclists are breaking the rules, but then they list behaviors that are legal in most places and make sense:

> overtaking queues of cars, moving at well below the speed limit or undertaking on the inside.

It also blames bikes for both moving too fast and too slow, and ignores that drivers'd be way more pissed if bikes took the entire lane (like they're entitled to in most places).
The Ice Cream: A Recipe from 1687
I don't think people will give Netflix subscriptions for Disney, I think they'll buy both.

I'm sure Netflix would rather have Disney's library, but there's always a second place in a duopoly.
It would go down, or up, like with any other currency.
Create a new product
"'perl4ever' should've tipped me off, I never learn"

I don't use perl any more - I discovered the joy of Visual Basic.
:)

Anyway, see my other comment about the Federal Reserve. It's not that there are no other costs to maintaining dollars as a currency besides printing the paper money, it's that I think the printing costs obviously dwarf the rest.
Despite his well-scrubbed appearance, Stephen Green ain't no lawyer, because one wouldn't write "if the First Amendment applies to Twitter" right after reading in the Court's decision an explicit disclaimer disavowing that conclusion.

If and when a court decides upon that issue, it may conflict with Twitter's TOS; this one certainly doesn't.