skysight-inc/HackerNews huggingface dataset:
I don't think that's really fair to humans then. When you play a lot of your brain is just trying to figure out what's happening on your screen: confusing stack of units, confusing units that have similar design, guessing enemy upgrades on units, guessing which enemy unit has the most damage to target it first, retreating your own damaged units, noticing the blur of cloaked units, and a lot of things in the like. It seems that the AI has perfect information. Limits on FoV seems artificial as it won't impact any of that.
Which AI are you talking about? The game-provided AI is not designed to beat players. It's designed to be a fun game mode for players.
True, but Piet [1] already does that without Hilbertizing code. Also, humble flex for calling this 7 months ago [2]

[1] http://www.dangermouse.net/esoteric/piet.html

[2] https://news.ycombinator.com/item?id=18496566
By the time you count your clocks, they've gone askew.
Shell Invests in Ethereum
I don’t really get why they styropak fruits and vegetables in parts of Asia and Europe. I’m not talking bags, actual trays wrapped in plastic film—as chicken meat in a US supermarket.

Unfortunately even the US is catching up to this trend where things are portioned out in standard packs (rather than loose).

You can see how different countries have different customs for storing their goods here [1], this was linked few days ago in a diff thread, but is illustrative.

[1]https://menzelphoto.photoshelter.com/gallery/Hungry-Planet-F...
When my wife renewed her Washington license via mail, her eye test was checking a box on the mail-in form that effectively said, “yeah, my eyes are fine.”
I concur. My wife commutes north-south and was just able to get through Viadoom but it was a close run thing. It would have been apocalyptic if permanent. I sometimes wonder if proponents of shut-it-off-and-see-what-breaks strategies are people in my organization's network infrastructure group using throwaway accounts. They love that approach.
Ryanair is another. But “very few” doesn’t mean “no”. I wonder if (but doubt) there are any airlines who also fly big planes (and have more than a handful of planes) that are single manufacturer only.
You’re Hired. Now Wear This Headset to Learn the Job
and hand-rolling means you've just swapped stripe as the failure point for your homebrew
Apologies, I should have been more precise: A cpu will win when you start isolating and creating a scenario to test for APM and TTFA (obviously), so if you are interested in advancing strategic and tactical AI capabilities – basically out-thinking the human – it makes sense to cap those solved parts to make sure you are winning because of progress you make on your objective.
I _think_ that is an the appropriate use for `Access-Control-Allow-Origin: `.

It would be up to you that only the URL for such scripts (not your entire site) have `Access-Control-Allow-Origin: ` , and to make sure that there is nothing malicious JS can do with `Access-Control-Allow-Origin: *` at those particular URLs.

Which is confusing to figure out, it's true, because the whole thing is confusing, indeed.
I think the generally accepted solution to this is to set the allowed origin dynamically (IIRC nginx can do this) by looking at the request host header on the options request. If the origin is in some allowed list then you return that origin in `Access-Control-Allow-Origin`
https://www.loom.com/share/a01102a62c0c45ad8a5372585142db3f
Setting interest rates AND THEN? come on you have to be able to complete that sentence, and when you do it will negate the prior sentence.
It's say it's more likely related to a recent sale of arms and planes to Qatar, who are in their bad books
https://mobile.abc.net.au/news/2019-07-10/qatar-donald-trump...
U.S. newsroom employment has dropped 25% since 2008
Bike lockers are pricy in cost and space (compared to nothing, not compares to parking garages) but the only meaningful solution. Perhaps bike rooms with human attendants could work, and solve the job loss of creeping automation too!
> If there has to be base + offset translation on every pointer access it is way too slow.

The memory access instructions in the x86 ISAs can do base + offset in a single instruction.
Starcraft BroodWar is very easily accessible for writing bots. Check out https://bwapi.github.io

I encourage all the fellow SC players to experiment with it. (SC2 is a huge download, and thus I never moved to try it)
So you think if NYT were the heart of the internet they will actually do better? Nonsense; the reasons NYT does it at their scale and Google does it at their scale is the same.
I always thought this was an intentional design decision. Players react badly to being "outsmarted" by an AI, so to keep the game fun they made the AIs predictable.
Well, the problem with most of these off the shelf , indoor sensors, is that they are calibrated to current reading of about 400ppm, that's their base. To correctly measure CO2 you will need something that does not depend on that value to self-calibrate. What's more, some of them can have +/- 20ppm or worse accuracy. If the average annual ppm increase is 2ppm you can't reliably see the increase on your home device. To do that you need to have something that's NIST calibrated, with correct accuracy, set in a right place, and gather the data for longer period of time. You will need to smooth the data, and know how to interpret it.

Source: I develop software for data acquisition systems
I don’t buy such a grandiose thing is the reason rich people can’t stop buying planes. You can buy a guitar for $100 on Craigslist and then play it in your backyard with a low risk of blowing up.
does your adtech startup with a completely made up metric that happens to be above industry average directly lead to sales?

money still flows in though
Also in Google's defense, the services (and ostensible benefits) Google provides in 1999 vs 2019 are so far different in scope that it's not a particularly helpful comparison/contrast. The year of GMail's launch vs 2019 would cut more to the point.
Rent?
Ways this story could have ended badly for the developers:

- instead of hardcoding the allowed value, they set it to always echo the value of the Origin header - browsers are powerless against that much stupidity, and can't distinguish it from a correctly configured server that is allowing the request. evil.com sends the request, bank says "evil.com" is allowed, browser shrugs and sends the request.

- instead of using CORS, they could have tried to build their own custom solution that allows ournewbankapp.com. The attacker would have to analyze how it works, and would then most likely find a way to exploit it to perform the attack, while legitimate users with privacy extensions would make the support hotline despair due to countless people complaining "I can't send money".

- instead of adding the custom header, they could have decided to check if "origin" is present, and if so, assume it's a cross-site request and check the origin against a whitelist. This still relies on standard-compliant browsers but isn't the worst idea AS LONG AS YOU REQUIRE AN ORIGIN VALUE, AND TREAT LACK OF AN ORIGIN HEADER AS A FATAL ERROR, BEFORE TAKING ANY ACTION (e.g. the money transfer) BASED ON THE REQUEST. I think can force same-origin requests to include the origin header with some option on fetch(). But if you treat a missing (or "null") header as ok, the attacker will likely find a way to make some browsers send no header, and steal money again. Sending "null" (or some other default value, been a while since I played with it) is easy, I think with some iframe trickery.

- they could have used plain HTTP, exposing them to DNS rebinding attacks even from remote attackers who cannot sniff their user's traffic.

- they could have an XSS vulnerability somewhere on the main site or the whitelisted marketing site, allowing the attacker to proxy his malicious requests through that site (and thus make them use a whitelisted origin). Maybe some long-forgotten kludge designed to proxy requests to third parties that don't support CORS...
This isn't new. There are competitors in this space. Years ago I was using one called Hey You. I'm not sure about the USA though, maybe it doesn't exist there, or not at a national level.
There's nothing that stops the most ethical companies from being completely compromised by state actors either.
Depending on the location, it should probably just tell you driving duration instead of walking.
Right! There's a diffusion of attention which makes the value of a follower decrease over time.

It's just one example, but I tried to measure this once by graphing clicks on tweets by Tim O'Reilly. He's got a nice history since he was early on Twitter and mostly uses Bit.ly so click data is publicly available.

What I found was that in 2010 he had about 500k followers and was getting 800 clicks per link on average. But by 2018, he was only getting 400 clicks despite his follower count having grown to 2M.

So, from Tim's perspective, the value of a follower dropped by a factor of 8. I think that's interesting even if we don't know exactly why the drop because it highlights the vanity of follower counts. Rather than feeling like his audience grew on Twitter, he should feel like it shrunk in half.

It's hard to draw definitive conclusions on why the drop. Was it diffusion? People who worked at Twitter tell me it was a cultural change too where people stopped using Twitter as a feed reader. So maybe that's part of it too.

Measurement is hard and conclusions even harder.
> Hollywood is hanging itself by its own velvet rope.

There you go, that's one better than the alleged Lenin witticism "The capitalists will sell us the rope with which we will hang them."

(Well researched, as usual, here: https://quoteinvestigator.com/2018/02/22/rope/)

Disintermediation strikes again.
How hard is it to trigger a regular HTTP POST instead of an xhr POST?
I'm also curious if they capped "screens per second". Humans cannot absorb all there is to see on the screen in .2 seconds and then switch to the next screen. Without such a cap, limiting the AI to "just see one screen" doesn't really do much.

It would be interesting to see how the AI distributes it's views if it were capped in some significant way.

Also, can the bot only issue commands on one screen at a time?
Thanks Tom! I haven't done this before so definitely don't know all the best practices around posting, getting feedback, etc. Just thought maybe there are some other people out there who could benefit from something like this.
Not quite, POST requests with standard headers and one of the following content types are not preflighted:

application/x-www-form-urlencoded

multipart/form-data

text/plain

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Simpl...
WTF Is Happening to Global Recycling Markets
They could be holding it in gold instead, what difference would it make ? You can probably take a loan with 100% gold deposit in any bank legally.
Yes. CORS is not so much a protection of your site against malicious user-agents;

It is a protection of your site's users, using good non-malicious browsers, against malicious other JS on the web.

I think this is one of the most basic misunderstood things about CORS.

Once you understand that, you can start actually trying to understand the threat model... which is still pretty confusing, to me anyway. But until you are there, you haven't even started.
> 2. Sales tactics are basically tried and true throughout time. It's no coincidence the most effective e-commerce techniques are scarcity and social proof[0]. Genuine influencers have the ability to affect social proof on a massive scale.

I wonder if 'social proof' is easier to fake/generate on social media with Sybil attacks (https://en.wikipedia.org/wiki/Sybil_attack) as well as payment to real individuals to vouch for something they don't actually use

I wonder if people will/are starting not trust these measures of social proof
Kudos to the website author! I've not thought of that before, but next website I create will block Google too. A new way of expressing my dislike for Google in my arsenal.
From New York Times privacy policy:

Some of the services and advertisements included in the NYT Services, including on NYTimes.com and within our mobile apps, are delivered or served by third-party companies, which may collect information about your use of the NYT Services.

These companies place or recognize cookies, pixel tags, web beacons or other technology to track certain information about our NYT Services website users. For example, in the course of serving certain advertisements, an advertiser may place or recognize a unique cookie on your browser in order to collect certain information about your use of the NYT Services. For another example, an advertiser or ad server may also be able to collect your device’s unique identifier in the course of serving an ad. In many cases, this information could be used to show you ads on other websites based on your interests.

We do not have access to, nor control over, these third parties' use of cookies or other tracking technologies or how they may be used.

For example, we use Google to serve advertisements on the NYT Services, which use the Google Doubleclick cookie, and in some cases, a unique device identifier, to show you ads based on your visit to NYTimes.com and other sites on the Internet. You may opt out of the use of the Google Doubleclick cookie by visiting the Google ad and content network privacy policy. If you would like more information about this practice, and to learn how to opt out of it in desktop and mobile browsers on the particular device on which you are accessing this Privacy Policy, please visit http://optout.aboutads.info/#/ and http://optout.networkadvertising.org/#. You may download the AppChoices app at http://www.aboutads.info/appchoices to opt out in mobile apps.

They are embedding third-party tracking technologies inside their app and letting each of them track however they want.
Not so rarely.
It's pretty common to serve the js frontend code on one domain the apis on a different domain
This is a hard space to break into because it requires in depth knowledge of operating systems. I'd play around with volatility https://github.com/volatilityfoundation/volatility.

Next take a look at getting good with IDA, it's expensive but they have freeware versions you can use, it just won't do x64.

Start by specializing in only one OS, pick linux/mac/windows. It's a very niche space and requires a lot of expertise if you want it as a job.

If you're thinking long term I'd take a look at becoming a malware analyst as it will also help you pick up skills needed to go down the path you'd like.
Fun fact: riscv does not even have a machine not instruction. In assembly it is just an alias for xori.
Made it up? Hardly. Watch YT videos with pilots themselves claiming this.
Do they know it was you, specifically? I would say they know your neighbor was talking with someone else, and possibly that politics were being discussed (not really something they seem to have put a lot of effort into recognizing, since it doesn't lead to shopping...) If you're interacting with an Echo or gHome you can always ask it "who am I?" GOOG is sneaky enough to recognize you on any other device, Alexa, not so much (and in this case you shouldn't be on their radar to being with).
But in your case the second buyer has proof too. The law says they still own it even if they don't have proof and even if the first one does. Why is that necessary?
I guess that's what I meant; XSS would give them the user's session implicitly on my domain, regardless of CORS. CORS prevents them from using that from another domain, which is valuable, but moot if you already have a breach.
There is a build time limit as well as a resource limit. Its not exactly a simple race
This is something that will probably prove more accessible with the Zero flavour of the 4.
alright my bad. i meant some value that is not tied to an underlying asset. But equating it with a scam like e-gold is not valid either. (and no currency or investment commodity has value that is anywhere near its intrinsic value)
First, I get the tools installed. Then, I follow an introductory tutorial, paying particular attention to the concepts that I am least familiar with, and doing any exercises that are part of the tutorial. I then pick an example of a problem that I know, such as parsing a log file, writing a lisp interpreter, a simple web server, maybe a problem or two from the Euler site.

Picking a good tutorial can help a lot. For Python, I have both the introduction and the recipes book.

Also, I try to read a lot of code from github.
Interesting that Powell does not address the power that FB gets by having its own currency. Having billions of users gives it the power to create its own economy and by extension its own government. If you give it enough time FB will be able to set its own monetary policy and rules. It won't happen today or tomorrow but give it time and it will.
It's more like suggesting that perhaps sometimes walking is better than taking a car, while more fashionable developers insist on trying to use the car to go from the kitchen to the living room. And you still have to walk to the car.
>>Yes, I do.

Do what?

>>It's not published, it has no path to get into the attention of researchers.

I mean, there's nothing that stops this hypothetical spider-man from publishing? If I was going through the trouble of doing independent spider research and came across something I found novel and groundbreaking, that's what I'd do.

Also, you still haven't stated your "many good reasons" for why this would be ignored other than "it (hypothetically) isn't published". You make a lot of assumptions, basically that people not working in academic settings are incapable of a-using language compatible with getting published and b- wouldn't want to get published which aren't true.

>>This happens all the time, by the way.

Of course it does. But "people in academia are still people and therefore accountable to their own biases and prejudicial decision making" doesn't fall under "good reasons to ignore a study" imo.
> I've read that the chess versions all have weak points, where if you know you are playing an AI, you can easily exploit them and win.

That may have been true in the past but it hasn't been so for more than a decade. A laptop running Stockfish handily beats top human players, even if the players know a year in advance the exact hardware and software revision they will be playing against.

https://en.wikipedia.org/wiki/Human%E2%80%93computer_chess_m...

Kramnik, then still the World Champion, played a six-game match against the computer program Deep Fritz in Bonn, Germany from November 25 to December 5, 2006, losing 4–2 to the machine, with two losses and four draws. ... There was speculation that interest in human–computer chess competition would plummet as a result of the 2006 Kramnik–Deep Fritz match. According to McGill University computer science professor Monty Newborn, for example, "I don’t know what one could get out of it [a further match] at this point. The science is done.". The prediction appears to have come true, with no further major human–computer matches, as of 2019.
Yes also see my comment about csrf token too. If the request changes user data it must be a POST request with csrf protection.

You can't make POST requests with ajax as CORS will protect you, but evil.com can create a fake form submission (with bank.com/transfer.php as the form's action) which can be a POST request. So in this case you match the csrf token which only you know and which is unique for the form/session.

It's a rabbithole :)
Germany has a return rate of PET single-use bottles with deposit of 98.8%. Of which ~95% are recycled.
Hey, HBO gets a show to season 8, and boom, https://www.reddit.com/r/freefolk/
Hm, technically don't think this would be required. Take for instance:

auto no_destroy = new MoveNoDestroy();

MoveNoDestroy* moved_into;

*moved_into = std::move(*no_destroy);

Wouldn't call the destructor of the moved from MoveNoDestroy.
Not disagreeing with you, but what are some books on more accepted scholarly tomes?
A little shortcut for this is:

new Image(1,1).src = 'http://localhost:1337/service'
nice writing, but this sentence is off:

>It’s becoming increasingly clear that the only goal now in Hollywood is to become gain market power in distribution or must-have content production, and then use that monopoly power to reduce the quality of output and reduce the bargaining leverage of artists.

I like the depth and history he brings into this piece.
Its APM and APS have been decreased since the exposition games due to feedback from pro players.
>It makes no sense to me why masses of people are okay with giving their prime waking hours...

I don't think anyone is OK with it, just that you as a low level worker have zero agency to do anything about it. The people at the top of the company who could make these decisions for the rest of the employees probably don't even work a rigid 40 themselves, so they might not be aware of the issue at all.
No, trees grow, thrive, die, and then decay releasing the CO2 they'd absorbed in life as well as nutrients used by other life. You have to bury the lumber from a forest far from oxygen to get it to remove CO2 permanently. Also, forests only counter ~1 watt of gasoline combustion per square meter or so. That's only enough to sustain a pre-industrial standard of living as it did, in fact, do Back In The Day.
Yes, that's definitely a big part of it. Test it all with curl or your language's http client, then put it in the browser and it breaks? Must be the client's fault! Which it sorta is. But only because it's a client that doesn't belong to you — you're controlling it on the user's behalf. It doesn't help that when you're developing on your own machine, you're user and the developer, and you of course trust yourself.
https://www.loom.com/share/e192e3131b38496c8d1bac28ee82d17f
That sort of game AI isn't designed to be strong. It's designed to be fun. See e.g. this talk titled "playing to lose" https://www.youtube.com/watch?v=IJcuQQ1eWWI
Mirillis Action 3.9.3 Crack and Keygen (2019) Full Version
It is a particularly interesting question in StarCraft because of the cloaked units, which are visible only by distorting the background (and from their sound).

Most humans will be able to identify cloaked units, but only if they look carefully, and not in heavy battle. Can the AIs see and/or identify cloaked units?

It begs the question if fair gameplay is even possible unless the AI uses machine vision against the same interface. For fair human-vs-AI games, they shouldn't allow cloaked units!
A usual counterpoint to this is to organize people to do a pop-up street - the Better Block project evangelized this several years ago starting in Forth Worth TX http://betterblock.org https://www.youtube.com/watch?v=ntwqVDzdqAU

Also, it doesn't have to be for biking. Seattle has a parklets program where businesses can apply and fund to have parking spaces removed for additional sitting room: http://www.seattle.gov/transportation/permits-and-services/p...

Seattle (along with other cities like) does road diets to see if reducing lanes will change habits - I'm generally for this though it can sometimes get some criticism (e.g. Cliff Mass https://cliffmass.blogspot.com/2017/04/fixing-seattles-traff... ). Perhaps the method of informing & preparing commuters in advance of road diets could be improved, alongside making sure there's plans in place to ensure transit frustrations (e.g. crowded busses, bus bunching, last-mile problems) don't occur.
License plates are public information. There is no website or state DMV that you, a private citizen, can go to and get the information on the plate's owner.