skysight-inc/HackerNews huggingface dataset:
France to toughen stance on planned obsolescence of goods
That page says that the Cookie header cannot be "manually set". Headers can still be automatically sent, and the browser can automatically send cookies from the cookie jar. So for example this will not send a request with the manually set cookie:

r = new XMLHttpRequest();
r.withCredentials = true;
r.addEventListener('load', function(e) {console.log('loaded: ', this, e);});
r.addEventListener('error', function(e) {console.log('error: ', this, e);});
r.open('GET', 'https://www.google.com');
r.setRequestHeader('Cookie', 'somecookie=somecookievalue')
r.send();

But this will send a request with the automatically set cookies just fine:

r = new XMLHttpRequest();
r.withCredentials = true;
r.addEventListener('load', function(e) {console.log('loaded: ', this, e);});
r.addEventListener('error', function(e) {console.log('error: ', this, e);});
r.open('GET', 'https://www.google.com');
r.send();

Assuming the user is already logged in to bank.com , the user's cookies will be automatically sent on the request, and the transfer will go through assuming there is no CSRF protection.
Robot Baggage System Comes to DFW Airport
Not that I want extra bacteria, but I wonder how significant that increase is practically, or what the baseline is. I'll sometimes shake a dozen peoples' hands in a row if I'm at a party, or hold onto public transport rails... Can it be much worse than that?
My laptop googly eyes tend to get dented when things press against my laptop lid, and then sort of disintegrate. I need extra-thin googly eyes.
> In studio visits with artists around the globe, I hear about the concepts they’re exploring. I see them spend vast sums of money on research before they share anything with institutions or potential patrons.

Come visit me I just doodle in my notebook it's cheap.
Lisa Su and Other Industry Leaders Debate over Health of Moore’s Law
Show HN: Vim Plugin DoGe: [Do]cumentation [Ge]nerator (10+ Languages)
Neither statement is true.

There is still the same control-click to open non signed software and there is still no aggressive permission model outside of the App Store.
This is overly snarky and should be closed for that alone.

Google funded its development. OSS projects do this. React has Copyright Facebook, yet I don’t see snarky PRs about scrubbing their name. Maybe Google’s logo shouldn’t be colorful?
> I'm a long time cycle commuter relucantly turned auto-commuter.

I just made that transition last month after getting hit by someone driving a truck while I was on my way to the bike trail. In the report the police lied and said I changed lanes by crossing a broken white line. The motorist and I were in the same lane, and there isn't even a broken white line on the road. If I can't safely make it just half mile to the trail and if the cops are going to blame me after someone plows into me from behind, I guess I'd better put myself in a huge metal cage with crumple zones and airbags.

On the plus side, I'm finding that I kind of like jogging for exercise.
For the record, sandboxed macOS apps do exist (as someone mentioned upthread) and have a design somewhat similar to what you're describing, but uglier for the sake of backwards compatibility. For each app you have a directory like /Users/foo/Library/Containers/com.some.bundleid/Data, which is an entire virtualized home directory, containing not just a Library subdirectory but also Desktop, Documents, Downloads, etc. The latter directories shouldn't actually be used, but they're there in case some legacy code tries to access them. When an app presents an open or save dialog, the dialog is out-of-process and unsandboxed, so the user can pick a file from their real home directory or anywhere else; once they do so, the app is automatically granted the ability to access that particular file.
There are tons of hand dryers in hospitals. Completely self-defeating, facepalm-worthy infrastructure.
> Those who really need this are developers at companies where the boss thinks they need it.

I think that hits the nail on the head. For most usages of GA the product they are selling is pretty graphs that management are convinced they need, any actual actionable insight they can give is secondary to that and I'd bet used but a small fraction of GA users.
I've ran this joke before but it's true...

Watch TV, get 5 ads every 5 minutes.

Watch Instagram, get 1 ad every 15 seconds...
I think stories took the best aspect of Snapchat in that people can post more engaging, expressive (video vs image), ephemeral content more frequently in a more forgiving, candid form of a curated daily snapshot of their lives.

Most stories typically aren't worthy of being memorialized in a main profile page and since people are posting so frequently it seems natural it would drive engagement through the roof if you want to keep up with your friends socially. Thoughts?
The Sad Story of TCP Fast Open
Relevant thread on the same subject from two weeks ago:

https://news.ycombinator.com/item?id=20282837
Almost every sponsored project has internal discussions. Many sync from the internal source control to GitHub.

Is it really realistic to make every chat with a colleague into a formal, public RFC?
Apple has done silent updates for Gatekeeper, the macOS code signing/file quarantine/light anti-malware framework ever since Yosemite. These are done silently unless you explicitly disable all updates and only show up as a visible item when you manually list updates using the softwareupdate command line tool, I think. AFAIK these are just config files and hash databases or similar.

You can view the history of these installs by running softwareupdate --history | grep -E "^MRT|^Gatekeeper"

I see an average of 2 updates per month.

FWIW Apple can also mark something as visible (but install automatically) with a certain config file key. A blog mentions this as being done for patching the NTP bug from a while back:

> Marking these updates as ConfigData cues the App Store to not display these as available software updates in the App Store’s list of software updates. These updates are meant to be under Apple’s control and to be as invisible as possible.

> Meanwhile, an automatically installed software update like OS X NTP Security Update 1.0 shows up as a normal software update, but has extra keys in its catalog listing to mark it as a critical update whose automatic installation is set to occur as soon as possible.

https://derflounder.wordpress.com/2014/12/27/managing-automa...
I went to the maker faire in NYC a few years ago. There was lots of cool stuff, but unfortunately about 60% of it were various slight mods/etc of 3d printers. Lots weren't even special, just a brand promoting itself.
> Escaping Rust sandbox is a short keyword away. That keyword is used all over codebase, in both standard and third party libraries, to implement these lower-level features, or overcome language limitations. You can't disable it because you'd loose vectors and strings.

There is no meaningful difference between the JNI and the HotSpot VM and the Rust unsafe keyword. The HotSpot VM is hundreds of thousands of lines of unsafe C++ code. It doesn't get a pass because it's the VM.

Rust uses unsafe to implement things like hash tables and lists, primitives that would otherwise be implemented in unsafe code in the compiler, because it was easier to write code than to write code that generates code. I actually hand-coded early versions of Vec in LLVM IR in the compiler. It was a miserable experience! Moving the implementation to unsafe code instead of raw LLVM IR made it easier to maintain, which made it safer.
The install scripts in rpm/deb can do all sorts of stuff that doesn't get tracked/reversed. There are package linters to help detect some of this buts it's largely a faith based endeavor either way.
Not hard. Just make an html form with the values you want, then with javascript call

document.getElementById("myForm").submit();
> Java doesn’t have unsafe code at all, not even in standard library, and it’s very hard to interop with.

Look at Android system libraries. They use JNI all over the place.
I honestly hate hand dryers, half the time I end up drying my hands on the sides of my pants if I'm wearing jeans...
My kid hates the sound of them too so it totally makes sense that they're actually bad.
I'd challenge any Japanese native who somehow believes this to read any nontrivial roster of names...
Medications and Supplements to Help Control Blood Sugar Levels!

These natural supplements include Cinnamon... sprinkle half a teaspoon of cinnamon on your food daily, eg. on your oatmeal. One study showed when cinnamon was consumed for forty days, there was a reduction in the fasting blood sugar levels of between 18 and 29% depending on the dosage of cinnamon taken, 1, 3 or 6 grams. As well as reducing blood sugar levels, there was also a reduction of between 23 and 30% in the triglyceride levels, and cholesterol levels were lowered by 12 to 26%. When taken in capsule form, cinnamon should be taken with your meal or up to one hour later.

Apple cider vinegar has been shown to be effective in improving insulin resistance. Research shows apple cider vinegar may possess "physiological effects similar to acarbose or metformin," prescription medications being used to treat type 2 diabetes. Vinegar also helps to slow down emptying of your stomach and allows a gradual release of sugar into your bloodstream.

Chromium is believed to stabilize blood sugar also. There have been at least fifteen well-controlled clinical trials on the effect of chromium supplementation on type 2 diabetics... results have shown chromium improves sugar or glucose metabolism. Chromium polynicotinate has been found to be the most potent type and is also useful in controlling sugar cravings.

Magnesium levels are often deficient in the cells of type 2 diabetics... a low intake of magnesium is a major risk factor in the deterioration of diabetic complications, especially retinopathy.https://dietsheriff.com/nutonen-review/
Yeah, I'm not sure I attribute Apple and Tim Cook's latest stances to strong moral fortitude. I think it's more corporate 101:

1) Public sentiment is hammering companies for perceived privacy violations

2) Our business model does not rely heavily on selling user data

3) Make public statements about how much we value privacy at literally no cost to us

4) Get in a good dig at our competition at the same time
Do you have any purchase advice/recommendations?
I've been on the Catalina Beta since the week of WWDC, and Zoom hasnt worked for me until the update today.

The loading modal would come up, but the app window would never open and I would have to force kill the app entirely, since I couldn't close the modal.

I suspect that Apple had already closed the possibility of the loophole on Catalina, which is why it wasn't working.

So I suspect they had probably noticed it weeks ago.
Remember Timmy we have to wear our helmets in school. Thank you young man.
Agreed, this is really a lovely, helpful book that's clear and easy to read, and introduces a lot of useful ideas in enough detail to decide which one to use in a given situation.
Umm. Thwaites is indeed melting

https://www.pnas.org/content/early/2019/07/02/1904822116

https://www.businessinsider.in/One-of-Antarcticas-biggest-gl...
There are car makers who now use DSPs to process exhaust noise to play INTO the interior of the car to make people feel like they're driving!
I drive a turboed car, turbos are naturally sound dampening, I'm totally fine with it being quieter as long as its actually faster.

To the speed point though, I'd probably drive a P100D because they're ridiculously fast...
If you have a blog that lives at `/` for example and posts that live at `/post/:num` for example, your SPA will have a href="/post/5" or whatever link, and then when you navigate there the SPA will get that blog's content from the server and be rendered there. I agree though that if you have comment functionality for example that would probably be made through an AJAX request in Javascript and it probably wouldn't be possible to automatically switch that to a form.
Here in Japan, we have anime girls.

(mostly) SFW google image search.

https://www.google.com/search?q=%E7%97%9B%E3%83%8E%E3%83%BC%...
If you use a phone with a Qualcomm modem you use one such system, based on OKL4 (or at least they used to use OKL4 + L4 Linux for non hard RT parts)
If you want to know how the influencer culture works and how they portray a photoshopped lifestyle, watch the Fyre Festival documentary.
Compressing VGG for Style Transfer
Study: https://www.bmj.com/content/bmj/366/bmj.l2408.full.pdf (via https://www.bmj.com/content/366/bmj.l2408).
To put it mildly, there are enormous problems with unelected people having the power to cause boom and bust at will. Worse, the elected people generally get blame or credit, so these unelected people have a very tempting power lever to influence elections. They can crash the economy to eliminate an elected leader they don't like, or cause an unsustainable boom to prop up an elected leader that they do like.
Only tangentially related but I'd like to share it as space nerds (like me) may love it:

https://mainenginecutoff.com/blog/2019/05/downlink

This is a small mac app getting real time satellite images, and using it as your wallpaper. One of the source is Jaxa's Himawari-8, hence the link.

Also, the podcasts from Anthony Colangelo (same page) are pretty good to keep up with the space industry
> Finally....I'm a speed freak and a gearhead, and the experience of operating a powerful car, daily, is its own reward. I wouldn't be caught dead on a bicycle, but I also wouldn't be caught dead driving a low-powered commuter vehicle shitbox.

Why you would actively choose to contribute more to climate change for what are essentially aesthetic/identity choices is beyond me, but many people do, so I'm obviously missing something.
"(...) honey, what's our card number? 123 (...)"
"(...) honey, what was the password? 123 (...)"
"(...) honey, i got us 10 first bitcoins, we need to printout mnemonic 123 (...)"
Not necessarily. The UNIX C syscall APIs all return 0 on success and anything not-zero is generally considered failure (usually -1). Even if it's wrong in C, it could possibly be more efficient in assembly to change the truthiness assumption around.
Time to commit suicide.
Location: Los Angeles Area

Remote: Yes, not preferred though

Willing to relocate: Yes

Technologies: Python(Pandas, Numpy, Flask, Django), React, JS, Node, HTML, CSS, Adobe Suite

Resume/CV: https://drive.google.com/file/d/1ZZo6wrfjiscSEDjYpevxMQaTKAh...

Email: brandonb2124@gmail.com

I am a full stack developer currently living in Phoenix but moving to Los Angeles in the next month or so. Majority of my focus is web related and looking to join a team with interesting work allowing for a lot of room to learn and grow.
Or just buy a $50 bike second hand and park it at the end of the bus route!
IIRC, part of the functionality included silent background updates from a domain that nearly expired, and was only renewed when pointed out to them during the discovery of this.
You're clearly more careful than I am :)
> Effective not because I buy what Tom Brady buys

Meaning ceramic underwear?
'Citizen Developer' sounds a bit like a corporate euphemism for a guard job at a gulag for political dissidents.
You can say password, credit card number, bitcoin/ethereum mnemonic in 1 minute without problem, can't you?
I'm in this camp
Sounds like something out of the Yelp playbook I've experienced personally w.r.t. their shady sponsored advertising services and their review filtering and business search sorting algorithms.
Non-commercial vacuum cleaners are acoustically engineered to be loud for this reason. Other examples of intentional loudening include the opening of car doors and aluminum beverage cans.

I suspect that the loud "powerful" noise level was selected to be in line with Dyson's brand image.
I think this is important research because many people seem to think that fruit juices or smoothies are healthy. If it's largely fruit then it's also largely sugar. And just because the sugar comes from fruit doesn't make it healthy.

I'm not trying to say there is anything wrong with having it once or twice a week though. Just that drinking a smoothie every day is going to work against people who may think it is healthy. If you are in your twenties and very active it may be pretty hard to see any negative effects of anything though. Which is partly why the myth of the delicious healthy fruit smoothie keeps on -- because healthy active young people can often eat or drink whatever they want and not see any obvious consequences.
> How would this work with apps that create things that a user would expect to persist, like downloads (kept after uninstalling a browser) or office documents (kept after uninstalling the office suite), or media production apps, IDEs, etc.?

I can't see how it would. Making the uninstall remove all the files created at runtime is the wrong solution to a real problem, which is better solved by forcing all packages to be self-contained and making their installation an idempotent operation. If we're able to do this, there's not much to clean up afterwards, and we ensure there's no privileged malware left (such as Zoom's one) as both the package install scripts and runtime would be able to run unprivileged.

I use NixOS, an OS built on Nix, a functional package manager that does this, and being able to set my system to a known state without going through the steps of formatting and reinstalling is really nice.
> What else have they pushed like this? Is there a transparent log?

Yes.

sh-3.2# softwareupdate --history
Display Name Version Date
------------ ------- ----
Safari Technology Preview 87 07/10/2019, 21:40:18
Gatekeeper Configuration Data 171 07/03/2019, 14:00:23
Safari Technology Preview 86 07/02/2019, 01:27:12
MRTConfigData 1.42 06/29/2019, 11:52:13
Gatekeeper Configuration Data 170 06/29/2019, 11:50:33
Safari Technology Preview 85 06/13/2019, 14:48:10
Safari Technology Preview 84 06/10/2019, 00:51:57
TCC Configuration Data 17.0 06/05/2019, 07:04:21
Gatekeeper Configuration Data 167 06/04/2019, 04:17:26
Safari Technology Preview 83 05/30/2019, 19:48:10
iTunes Device Support Update 05/15/2019, 16:27:15
Safari Technology Preview 82 05/15/2019, 16:27:15
macOS 10.14.5 Update 05/15/2019, 16:27:15
Gatekeeper Configuration Data 166 05/14/2019, 02:36:07
Safari Technology Preview 81 05/03/2019, 00:47:53
MRTConfigData 1.41 05/02/2019, 06:36:59
XProtectPlistConfigData 2103 05/02/2019, 06:36:37

And the list goes all the way back to when I bought my Mac. Among the list above, only the Safari Technology Preview updates and the macOS 10.14.5 update are initiated manually, as far as I can remember.
I haven't been following this issue, but i am very wary of Zoom since they automatically turn your camera on and broadcast your stream as soon as you click a Zoom link in your web browser which seems like a major issue to me...
Easy DevOps for Data Science [OC]
Such a system would not allow the application to write to any place outside of its sandbox or a designated user document volume. The system can't be touched. If you want to create a system config file, you are responsible to break the glass and move it and then all bets are off.
While bicycles are popular, it is hard to imagine that human-pedaled versions will become a norm.

It is impossible to imagine them used in a heat of Miami, or Atlanta (Georgia), or in Moscow.

There well populated and mild-weathered megalopolis (London, most southern CA, north east China) -- but the speed, distance and volume of participants -- just do not make bicycles practical.

I think the long solution is really de-urbanization of these megacities that act like a country-within-a-country.

On a separate note, I find the use of word 'platform' (even in quotes) is unfortunate.

Platforms, I though, mean something that provides composeable building blocks + principles for a variety of yet-to-be-anticipated needs.
A Cold Take on IBM, Red Hat and Their Hybrid Cloud Hyperbole
Storing Data in Music
France to stop reimbursing patients for homeopathy – World news – The Guardian
If you want to help us make the web faster, please email me.
Tips to Improve Your Mobile Site’s UX
UX Design is constantly re-invented. Stay ahead of competitors with these smart tips by our UI/UX experts for improving your mobile user experience
Zoom should just move to a webRTC based setup with no plugins or anything. Wouldn’t that make things easier?
Neat! I hadn’t seen this before. I’ll have to take it a spin for a side project at some point. Thanks for the recommendation!
No, dragging an app from "Applications/" into Trash is equivalent to dragging a program folder from "Program Files\" into Recycle Bin. Actually that's exactly what it is.
2nd top story at the moment is about a 13 year old's research into the noise generated by hand dryers.
Carboot sales model would be the closest one that would work out well for all.
My point of view as a SQL developer reading a article about something front-end by curiosity:

Yet another article about some <acronym> ranting about usage and misconceptions about <acronym> without even caring to explain in the first 20 paragraphs what the hell <acronym> mean or is supposed to achieve in the first place.

You are free to re-use and adapt this sentence for each new <acronym> like feature trending at any point in time.

PS: My bad it was actually described in the last sentence of the citation inserted in the third paragraph.
That is the best that companies cargo culting the big four have for evaluating the skills and experience of professionals.

The industry is going to have better ways in the future for sure. The current state of the industry is that many have access to a computer and the attitude that programming pays a lot so just walk onto the job and into excellence. Reality is obviously further from that dream.

Other comments have already shown other ways evaluating a programmer and I don't anything to really add.
Comment deleted cuz I’m too busy to read details of articles.
Pure Java groovebox engine, beginning stages. need help
Gore Vidal had some pretty horrific commentary about the Polanski rape case if you check his wikipedia page:

https://en.wikipedia.org/wiki/Gore_Vidal#Interview_on_his_th...
It's not accurate to say influencers don't work very hard. Some of them are also genuinely talented. It's just that they're talented at and work hard at something people here don't value: popularity. The illusion that popularity is just a byproduct of important work matters to the credibility of being famous. Influencers just throw that away.

When I asked my sister why she just called a girl at her school "famous" she said because she has 100k+ followers. So she is famous for being famous.
Göcek Hotels – Turkey/Muğla
The plus points of Rust aren't just borrow checking, but also the removal of sons of cruft and the benefit of modern tooling and language design.
Here in central Virginia our city traffic department has been running a number of bike/ped experiments with plastic bollards. The NIMBY backlash has been severe and at least one has been rolled back.

'Experiments' only work if they're testing something measurable. Otherwise they're just an undo button.
Zong Massacre
At least there is a convention to have an uninstaller. If you create the installer through conventional toolboxes the uninstaller comes for free. That's how most Windows programs have both.
Not a multi-server operating system. Source: worked on it.

Unless it changed, L4 is used with additional code co-located as the base-band modem on its own cpu. Small RTOS is not a multi-server micro-kernel based os.
Next she should target the dynamic compression that hasn't just destroyed all popular music since the late '90s to make it "louder," but most likely a lot of hearing as well.
I'm always impressed when I look at vim plugins. I've fiddled with some vimscript and mostly bounced right off it.
I think this is a very different approach than microservices. You're not sidestepping the problem of consistency, you're aware of the trade-off.