skysight-inc/HackerNews huggingface dataset:
It's actually more of a pragmatic decision than it is one of safety for Flyadeal.

They were slated to take the 737MAX deliveries starting in 2021 and with deliveries currently halted, there is no way that will happen (especially if the airplane isn't cleared soon). Flyadeal is trying to grow and they need planes to do it. Airbus can deliver on the 2021 date without issue and Flyadeal was likely given a slight discount to pick up some empty production slots.
That's how I feel about DeepMind for sc2, it doesn't sounds like a smart AI but just an AI insanely fast ( can micro everything instantly ) which is not realistic. Also APM is a usless metric especially for a computer since a computer only do useful actions, so you have a pro player doing 400 apm and DeepMind just 120 but 100% useful.
Most that have multiple providers probably have e.g. Airbus widebody jets and boeing narrowbody jets etc. Most airlines don't have an equal spread of A320/737's for example.

A good idea even when all planes are the same manufacturer is probably to not have all planes being the same model so they all get grounded in case of a discovery (An NG 737 is not the same as an older one which is not the same as a MAX etc)
Completely unrealistic.
The requirement is between zero percent and ten percent. [0]

Basically, for assets less than $124 million, the reserve requirement is 3%.

For more than $124 million, the requirement is 10%.

In other words, for every $100 on deposit at a bank, it can create "out of thin air" $90 and loan it out.

If someone then gets that $90 and puts it in a checking account at the bank, the bank can create and loan out $81, then $72, than $64, $57.6, $51 etc.

[0] https://www.federalreserve.gov/monetarypolicy/reservereq.htm
Yes, though you wouldn't turn it off, you would put their domain in the header the response sends back to the client.
Additionally, in order to be 'ethical' by any means, they still have to collect the data in the first place. Regardless of actual intentions around ethical/defined practices, that always leaves the possibility for someone else to access that data and do unintended things with it.
This seems pretty disingenuous given the range of services offered by Google and New York Times - New York Times is a regional publication that doesn't really have any reason to know your location besides ads, while Google offers a free mobile operating system that millions of apps run on top of, many of which (including their own) use the location capabilities of the platform to provide useful services.
Sports league app notifications apparently hijacked by angry developer
I'm fairly certain that these patches didn't land until recently, at which point the design decisions were probably already made at Zoom. (I don't know much about Zoom, but that seems like a reasonable assumption.) Additionally, these changes aren't likely to apply to Firefox ESR or IE for a while.

In Zoom's case, I highly doubt CORS on its own was a viable solution. Maybe in 2026, a decade after the patch, sure, but in the current climate, it's not reasonable to expect that all users will be using browsers that have adopted these changes in 2019.
Hmmm.... never thought about this but now thinking about it... does anyone need CORS? Can server-enforced access controls on "Origin" substitute for CORS in all cases?
The Brood War AI development community is very welcoming and supportive.

You can see bots in action at https://twitch.tv/sscait

Most discussion happen on Discord at https://discord.gg/QU457H
Okay, no, it's not. You're being silly. We could always fire the Clathrate Gun... (^_^)

But you bring up an interesting point: there's no going back. This really is the Anthropocene Age and we're going to have to manage the planet from now on, now that we can, now that we know.
She must not have seen this classic '1000 Ways to Die' segment where a platinum drinking straw starts out in a nostril and ends up in a frontal lobe.

https://youtu.be/rALPqV7pUhk
I don't get conan. Portage can already create a linux root in your homedir (see the prefix project) and has a huge package repo. What am I missing?
Before I go further: do you own a smartphone? If not, you can ignore the rest.

So, assuming you have a smartphone. That is a device which has:

- Permanent network connection. Doesn't matter what you do on your Wifi, it has the cellular data network. Which is controlled by an independent processor with its own firmware

- Excellent noise-cancellation microphones. They may not be able to pinpoint the sound source like an Echo would, but they are still pretty sensitive

- Accurate location updated via GPS. If you block GPS, it can still use the cell phone towers as an approximation, plus any SSID beacons nearby

- Very powerful processor, capable of listening for 'interesting' data before sending anything

- Similar functionality to an Echo / Google Home / Apple whatever. They'll be listening for "hey siri" or "ok google"

And so on. Plus, anyone you interact with will have such a device in their pockets.

Given that. why would an Echo be of any particular concern? At least you can monitor their network activity easily. Not so with a smartphone, which is a much higher threat. And yet most people sleep with them next to their beds.
I see a lot of comments about not harming luxury tourist beaches. But I would (perhaps naively) imagine there’s a lot of garbage beaches along the equator. Is this reasonable? Perhaps in polluted areas that aren’t especially valuable anyway?
I was talking about possibility of having multiple projects run by different countries/non-profits at the same time, without any coordination, and messing up the climate even more. Why is that so controversial?
This article is a great illustration to me as well of how hard it is to do security right even if you're a professional, much less a developer who's mostly responsible for implementing features not building secure systems. The internet is rife with self-proclaimed experts, all offering directly contradictory advice as loudly as possible on best practices for security.
Tiny robot leaps around carrying its own battery, electronics
Yes, you can send some POST requests without a preflight OPTIONS request: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Simpl...
Alphastar did some inhuman stalker micro that the APM debate seeks to cover, but doesn't.

Stalkers have a player operated ability to instantly move a short distance 'blink' once every 5 seconds. When in a fight, you optimally let the stalker(s) taking damage soak up as much damage as possible and then blink them backwards so they can recharge shields and continue firing from behind other stalkers. They don't stop firing, so all the work the opposing force did trying to kill a shooter, resulted in no outcome at all.

That functionality is balanced by the fact it is hard for a human to time activating the abilities of many stalkers at once in time with the damage they are taking and perform the many other actions the game requires at the same time.

Alphastar can perfectly blink back stalkers with limited apm because timing things is obviously not a problem for it, making stalkers way more value-for-money than they should be and can hold off high investment attacks more cost effectively. Ultimately sc2 is a game of economy and timing so this small change gives a massive advantage.
At the moment the oceans are being acidified by dissolving more CO2 in them - I assume that if you dump enough olivine into them to negate that (or rather return them to preindustrialization ph) then long term you'll also soak up about the right amount of CO2
Interesting that the spec disagrees with the implementation. Maybe the multi-origin leakage was filed as a bug somewhere and fixed post-spec?
I'm sure you are but just in case are you aware of hackaday.com?
The Russian Orthodox Church May Stop Blessing Nuclear Weapons
Can you do any of those things with gold?
StarCraft: Cartooned
Another option is to use a secure token (https://github.com/OWASP/CheatSheetSeries/blob/master/cheats...) this is a PITA but frameworks like ASP.NET have this baked in so it's not really much of a hassle in practice.
If it were just a matter of hand speed, bots using uncapped speed (tens of thousands of actions per minute) would be beating humans years ago. But quality matters way more than quantity. It's a hard problem.
Your argument is not compelling: you've described the drawback without considering the benefits. What if that prominent maintainer hadn't made the mistake (a mistake attributable to poorly captured design or requirements, but not the implementation). Is there something intrinsic to Rust that would lead them to this error? (no, I think not).

> Please don't be like these people! Keep the stable software we have, and maybe write new software in Rust.

I say: spend your time how you see fit. I love Open Source software, I love GNU/linux and GNOME. But IMO it's always been about scratching an itch first and commitment to a cause second.
FEAR, Far Cry, STALKER are pretty good (but very different of course, since FEAR worked in closed areas and the latter two in open areas).

Also, we need a way to put all those new cores AMD is bringing to desktop CPUs to good use :)
When I was a kid in the 90's, I could see a movie for $1.50 in the evenings or $1 for a matinee ... in the midwest. They weren't first run movies, but rather movies that were in between their time in the movies and when they went to video. I'm guessing a few of them might have been on HBO during that time frame, but it really didn't matter.

Some years later, that theater quit doing the second run movies and switched to regular movies. I feel kind of lucky that it was after I moved away and had basically quit going to theaters anyway.

I'd probably go more often if things were of similar cheapness. The low cost also meant that I'd be more willing to see comedies and take chances on other movies that don't truly benefit from a large screen and sound system. I also wasn't all that out of sorts if the movie wasn't very good since even at that time, it wasn't much money.

I truly think the advantage of movies in the 70's and early 80's was the lack of popular home video. If you didn't see the movie, you missed out. And I think that helped afford somewhat higher prices, though they didn't need to charge less for second showings as they used to do (Disney cartoons, for example).
What does that have to do with the “far left”? Is the “ far right” all set and ready? Also what serious geoengineering proposals are out there that are understood and cheaper than reducing CO2 emissions?
> Focusing on APM is kind of a red herring anyways because during previous matches there were only a few milliseconds that it spiked above human levels, and it was usually when moving workers

If you believe Aleksi Pietikäinen -- and pretty much every one of the professional players who played against it -- the claim you're repeating here is so misleading as to be fairly considered an intentional lie on the part of the deepmind team.

For example, TLO's inflated APM are presented in that chart without comment. Specifically, without the comment that his high APM counts come from a particular game context in which holding the mouse button down (i.e. a single click with a duration) is counted by the game as thousands of APM.

https://blog.usejournal.com/an-analysis-on-how-deepminds-sta...
Eva(luate) https://github.com/NerdyPepper/eva
Nice book, and already included in this awesome list: https://github.com/r0f1/datascience.
Safari used to let you turn off CORS checks in the developer tools menu.
My laptop's hard drive had 100% reliability for upwards of 6-8 years.

I'm still making backups.
Even a JavaScript initiated POST request will go through. Blocking it would not make a lot of sense, because the attacker could just use the FORM (possibly in an iframe to keep it invisible to the victim).

It is possible that XHR, or common XHR libraries, default to adding some header that makes it a non-standard request, but a fetch() call works.

In Firefox, open a debug console and run

fetch('https://otherorigin.example.com', {method: 'POST', body: 'blah'})

You will see two things. In the console:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://otherorigin.example.com/. (Reason: CORS request did not succeed).

In the network tab, a HTTP request.

Replace with a URL of a server you control, or run `nc -lnvp 9999` and replace the URL with http://127.0.0.1:9999, to see that the request is indeed being made.

As the author said... few people understand CORS.
[Amateur hour alert]

I spend some time thinking about which version. Not a language, but recently - tensorflow. v1 has epic documentation but is about to die, v2 has no documentation but is the future. Made a conscious choice to accept pain & suffering by struggling with (temp) lack of support.

Any type of new tech - I usually start by spinning up a Ubuntu VM.

...because I've realised something always goes horribly wrong on first attempt & I'll need to sh!tcan the VM.

And second I like to try to push all the tech to latest beta (but not alpha/nightly). Not because I need the latest but because it lets me touch base with where the current community pain points/issues/thinking is. Emphasis on try. Noob attempting to roll with a beta of a tech he/she doesn't know is a very conscious & deliberate reach.

>What exercises do you go through

On the actual programming side - I make a bee line for the debugging equivalent of "print". It's all a black box to me until I can pipe output to something.

>programs do you implement

I find the classic example that is simple yet not hello world and dissect that. e.g. for ML the classic MNIST set. The code to get that to 90%+ accuracy is like 10 lines...you can dissect the hell out of that for understanding
If I were moving away from the Raspberry Pi 4, I'd definitely consider the Nvidia Jetson Nano. It comes with a massive cooler attached. Pi 4 needs a cooler which will run you around $20. That puts you rather close to the nano in price ($75 vs $100), but the nano also has a GPU that is enormously more powerful and well worth the extra $25. Not needing special HDMI cables (or adapters) for the Nano is another money saver.

The biggest factor though is support. Raspberry Pi has a lot of software support, so you aren't running into weird bugs here and there with nobody around to help. The Jetson community isn't nearly as big, but Nvidia's track record on their software support is generally quite good. In this case, they have an extra interest given their push for commercial applications and that the X1 sees use in the Nintendo Switch and Shield TV (among other things).
Don't trust, verify: https://news.ycombinator.com/item?id=20406633
OK, I think I was confused about what "XSS" means or how you meant it or I was thinking about it differently.

The important point though: You don't need any pre-existing vulnerability on your site in order for "Access-Control-Allow-Origin: *" to create a vulnerability.

This stuff is sure is confusing to talk/think about though.
Coast Guard Issues Significant Cyber Warning After Attack
Chrome requires you to hold Cmd-Q down before it will close.
The article doesn't say that Netflix is a monopoly.

It mentions that investors are pricing it based on hope that it could become a monopoly, which is explicitly saying that Netflix is not a monopoly.
Amazing! When you're team is hiring or looking for volunteers, let me know and I'll throw you some free job post credits to use on https://climate.careers :)

- Evan
Insect is an open source, high-precision scientific calculator with support for physical units, which I wrote some time ago. There is a version on the web and one for the terminal.

Web version: https://insect.sh/

Your calculation: https://insect.sh/?q=10m%20*%201000kg%20*%209.8m%2Fs%5E2%20t...
That's another issue, as now you'll have police applying selective judgement, mostly in urban areas that impact people's ability to work.

Headline will be "Police target minority driver licenses for minor traffic infractions."
They can't be a central bank because they are not a government.
We need general worker protections because general employers do not protect their workers. I bet a century ago you would have used this line of logic to argue against the 40 hour week, or fire escapes.
The webserver listening on localhost:19421 should [...] set a[n] Access-Control-Allow-Origin header with the value https://zoom.us. This will ensure that only Javascript running on the zoom.us domain can talk to the localhost webserver.

If you create a single-purpose webserver, you can really handle this better than asking the client to play nice via an HTTP header.
I can see how micro might not be interesting for people more into strategy games like chess but the macro is strategy. Sure Starcraft may not be best for that (I much prefer Ashes of the Singularity for example for a more strategy focused RTS).
this is essentially why i have a dbrand skin (aka a piece of textured vinyl) on my macbook pro
Ketroc provides a useful data point.

Ketroc plays Master level Terran SC2. His APM is poor, he sometimes gets supply blocked, his micro isn't great. But his strategic understanding is excellent. Ketroc grasps exactly what's going on, and also how other players are paying the game, which leads to him winning at Masters level (not pro but very good) where most competitors have high APM.

Ketroc was famous in early SC2 for "that blue block is moving" a phrase from commentary of a game in which his opponent takes Ketroc's base but Ketroc's superior strategic understanding leads to an unconventional win.
Let’s take Disney - there biggest upcoming competitor by far.

The Disney brand and their library is much larger than Netflix’s. If anyone can break in Disney can.

Besides that, Disney has an evergreen library that goes back decades. The only war that Netflix has to make its money back off content are subscription fees. By the time a movie hits Disney+, it’s already made millions in revenue. Disney+ may “operate at a loss” for four or five years, but that’s only because it is “paying Disney” for the rights to distribute movies.

What if the other one is HBO+ - Warner Brothers announces streaming service? Now you have a choice between the two largest movie studios with popular movies everyone has heard of and you get Amazon Prime Video for free because let’s face it. Everyone has Amazon Prime.

What happens when Disney bundles Disney Plus and Hulu for the same price as Netflix? Now you have access to a much better library than Netflix.
I suppose if they wanted to, they could pretty easily add a click accuracy limitation as well, and force it to work around that, as with APM and map view.
We're one step away from mass-produced brain-computer interfaces. When a substantial portion of the population hooks in, they will cease to be human.
Scuttlebutt (decentralized social network / protocol) has a tool specifically for this. It's called Dark Crystal. the basic summary is that your secreted gets securely divided among your friends. none of them can read it, but if you get enough of them to send their "shards" back to you you can rebuild the "crystal" and recover your secret.

The web site isn't great but...
https://darkcrystal.pw/

and here, of course, is the Scuttlebutt site: https://www.scuttlebutt.nz/
I have no idea what I'd use this for but it sounds awesome.
Good point. That was too defeatist of me :)
Cloudera's Changes to Licensing
This is interesting, I definitely have a few good buddies who can't stand when a company sends them a HackerRank or Codility test, maybe a platform like this makes more sense to keep us and hr happy lol
I think what is happening to Libra right now is a good example of why Bitcoin is so censorship-resistant minded.
Using behavioural insights to improve our customer communications
Banks follow fractional reserve so they have to keep 10-20% of the deposits in cash. Libra and most stablecoins keep 100% reserves so it's even stricter. Libra claims that every coin is backed by fiat currency so investing the deposits is not how they plan to make money off of this.
From what I've seen with Zero-K (a Total Annihilation descendant) on Twitch, strong players play most of the time zoomed-out to see the whole map at once; some just disable the minimap entirely.

IANAPGM, but one can observe that TA and SC are indeed different RTS games in the sense that TA has a territory control focus (so perhaps a bit more strategic), while SC relies more on the micro/macro focus (workers, some skillshot abilities - which incidentally led to the birth of the MOBA genre).
Do you really want to compare the value of Netflix’s IP to that of Disney or Warner?
Only if someone was around to hear it
Again, you're not understanding, or perhaps, you're assuming that users have a much more thorough understanding of the precise semantics of C++ than they usually do.

It generally takes extra effort to force the compiler to use a reference or the move constructor instead of the copy constructor. For example, "for (auto x : container)" will usually involve a copy constructor where a reference might have sufficed. And because copy constructors are generated (unless you take extra effort), there can often be no indication that the most natural form of the construction is actually less efficient than originally desired.

Yes, if you're aware of the gotchas, you can avoid them, but it is consistently extra effort that has to be put into doing so, and slipping up and missing the efforts in a few key places means you won't even be alerted that you might have forgotten something.
No it’s not.

Google has many primary concerns it needs to manage. That’s how you get big - by managing lots of concerns successfully.

If they drop one too long, they start going backwards very quickly.
Stripe's API was down again
Hasn't hit their status page yet, but our error rates are spiked up again, and they just posted a tweet -> https://status.stripe.com/

5:35 Eastern -> Their status page has been updated
This is an interesting idea. There are some similarities with the secondary-key, time-locked "Vault" proposal for handling key-theft of Möser, Eyal, Sirer:

http://hackingdistributed.com/2016/02/26/how-to-implement-se...

(There's also a slight similarity to the 'Fomo3D' blockchain game, where someone who can manage to be 'last to act' can win a large pot.)

Practically, the need to stay aware of challenges, and answer them, introduces some new costs & risks. For example:

* A user might want to have a bit of sentinel software watching-for & responding to challenges, to lower the burden on their attention/time. But then that sentinel itself becomes a regularly-online, potentially-compromisable key location. And, an attacker who can force a sentinel-outage may be able to sneak away with funds via a timely challenge.

* A user who has a secure, offline key might nonetheless have their online systems temporarily compromised by an attacker. A challenge procedure could then prompt the target to move their offline key onto a compromised system, to answer the challenge, but then lose funds that otherwise were not at risk.

That said, there might still be situations where these concerns are acceptable, perhaps in combination with further refinements (along the lines of the `Vault` idea or other tuned tradeoffs between things like amounts, timing, and number of involved keys).

A bit more darkly, I know you've more-or-less ruled out security against physical attack as a goal, but it strikes me that this system may offer an edge to attackers who can precisely time their ability to kidnap/incapacitate/kill a target. By knowing first, and exactly when, a target won't be able to respond to a challenge, the attacker can be first to claim the unprotected funds. This timing-based aspect has some similarities to the old idea of "assassination markets", where being able to precisely time a death is what lets an anonymous perpetrator collect a bounty. See:

https://en.wikipedia.org/wiki/Assassination_market