skysight-inc/HackerNews huggingface dataset:
As just one example of very poor reasoning, I found his treatment of how/why patriarchy is so common to be rather poorly reasoned. He basically says:

"It can't be strength because the strongest person doesn't usually rule societies." Then moves on to, "men are more violent and therefore may make better soldiers, but fighting doesn't mean you'll be successful at leadership." Finally he says, "maybe there are evolutionary pressures that would make men more competitive and ambitious and make women more subservient, but women could gain power by cooperating amongst themselves and we see matriarchal societies among animals so that can't be it."

The first 2 are basically restatements of themselves, and he completely ignores how strength or violence can establish conditions where the stronger party would gain power without the strongest individual within that party necessarily leading the whole group. In essence, strength contributes to patriarchy, which then is self-reinforcing and within the group of strong people there are many qualities that can bring out a leader. He glosses over the volumes of examples from history of military leaders taking over societies. Those leaders had to be good fighters to rise through the ranks and earn their soldier's respect. Then they had the army to impose their will. Seems plausible, fairly obvious, but he doesn't address it.

The 3rd is really oddly toxic because it suggests maybe a genetic subservience. I personally find that hard to square with the people I know and what I understand about genetics, particularly that very complex traits such as social behavior are extremely unlikely to have strong genetic ties at a population level. So much gets influenced by culture. See for example the tribe of baboons that went from patriarchal to matriarchal [1]. It's good that he dismisses it, but he should have emphasized culture more.

Essentially he doesn't consider that reasons 1+2 could predispose to one type of dynamic (stronger people have more power) which will then tip over into patriarchy, and once a social system is established it takes a lot to change that system. Many arguments in the book could have been made in 1/3 the amount of text, and could have been made better.

Small other annoyance: at one point he says that until modern times nobody wanted to travel, that the desire to travel is a consumerist urge and a demonstration of wealth. Nevermind that for most of human history it would have been insane to even think of traveling more than a few dozen miles from home and BTW that would have taken months/years, and anyway you probably wouldn't have known that things like the pyramids (picking a random example) existed at all. So how exactly does he conclude people didn't want to travel for leisure because they weren't poisoned by consumer culture?

[1] https://www.nytimes.com/2004/04/13/science/no-time-for-bulli...
This video seems to imply that latency of the neural networks is around 350ms, which is fast but within human ranges: https://youtu.be/cUTMhmVh1qs?t=1488
AI Artificial Intelligence-Entrainment, 5G Plasma Based Black Goo
The Conscience of a Hacker (1986)
> So please, tell me again how AMP is "democratizing technology".

Your whole rant ignored the fact that people other than Google get to use AMP pages. That's how.

> So what started as a partnership between content and distribution, where everyone is happy, has degraded into the distribution channel completely owning the audience and taking every bit of control from the creators of the content.

This was always the case. AMP doesn't change the fact that the search engine's ranking determines how well the publishers do.

> users ALSO can't opt out of this - they can't even get to my site to download the game anymore even if they want to.

That's a problem with the search engine's ranker, not with AMP. If a publisher publishes separate mobile and desktop pages but cripples the mobile page in a way that makes it useless, a good search engine should prefer to show the desktop page even to mobile users. The same should happen with AMP. If the search engine doesn't rank properly, users will choose a different search engine. For example, there is a broad range of queries where I prefer AMP results because they load instantly, and I want them to appear first. If there is some feature in a web page that I want that I know won't appear in an AMP page, I will skip the AMP results, and the search engine should update its ranking model accordingly.
You are confusing two things here.

The discussion is what allowed cars to take over i.e. in the past not what might happen in the future.

Urbanization is a reality ex. because of the way the job market evolves, but the claim that there was some big conspiracy to make the cars take over is simply unfounded and based on very sloppy thinking.

Cars took over because they allowed us to live further away from the big cities which was cheaper and gave us more room and allowed us to build sprawl because the land was plentiful.

It's a combination of things not just some single reason that obviously isn't true which you will see the second you look at other countries who also need cars but doesn't have a legal system that helps.

Urbanization is taking over because of the benefits it offers today. Just because cars might not make sense in the future it doesn't mean that it didn't make sense in the past.

And no matter what, it's not something anyone of us decide to do just because it'something that we do once it makes sense and the benefits outweigh the negatives.
Ask HN: What steps do you take in learning a new programming language?
What process do you follow to acquire and start using a new programming language?

What exercises do you go through, or what experiments or programs do you implement ?
QCSuper, capture raw 2G/3G/4G radio frames from Qualcomm-based phones and modems
And even if you find one: If you only have sandpaper then sandpaper is still better then looking at the wood log and "sorry, I know this has to be worked on, but I don't have the right tools - and I know I probably won't get them in time either - but I won't do with this bad tool". Sometimes you have to use what you have, even if it sucks.
Yeah that's correct, CORS is a browser feature. If you had a nefarious browser installed it could indeed defeat CORS, but at that point you already have a nefarious browser and CORS is the least of your concerns.

CORS prevents a malicious site from exfiltrating/accessing data using the access you have, for example an internal site that is on your computer's network but the malicious website's servers can't directly access.
Congratulations Netlify on launching this! I'm all for simple, non-tracking analytics, and this perfect for that use.
I absolutely hate the current same-origin-policy (SOP) we have and therefore CORS. In the end, CORS is a way to work around the problems the same origin policy creates. Yes, I know there are good reasons why we have it, but in my opinion, it is the wrong solution to that problem.

I mean, the biggest problem the SOP solves is that some website could trick the browser into sending an authenticated request to your site/API. And while the SOP just kills interactions between different origins completely, I wonder why they didn't just go with not allowing the browser to include any state it got from an origin earlier when the request comes from a different origin. That way it would be possible to do requests between different origins, but without the problem of hijacked authentication.

Instead, we got this same origin policy which completely isolates different origins and makes browsers a lot less powerful than other HTTP/S clients and drives developers mad.

Edit: Feedback appreciated.
Sure, we do this in Rust too.

I’m not sure what benefit this would bring you in JS.
Natural Foods the Diet You Only Need for Weight Loss
Why wouldn't you? I have a daily 10 mi. commute. In the spring and summer, I almost never drive my car. I haven't driven my car in 2 months, come to think of it.
It certainly won't allow me to make xhr POST requests without sending an OPTIONS request first. Are you sure about that?
I'm perhaps in a subcategory of (3) that falls under "Understand ML; concerned".

Knowing what I know about how people I have worked with have come close to or have actually mishandled data despite the best of intentions, I do not trust any of these teams without an explicit accountability mechanism that is observable by an outside entity. I'm not looking to punish slip-ups, because mistakes happen, but I am looking for external enforcement to keep people honest.

It's not that I think the engineers using this data are mustache twirling villains, it's that I think mishandling is inevitable due to inattention (yes, even you make mistakes!), and we have to design our data pipelines against that.
I know you know this, but to clarify steps 2/3:

- Evil tries to make an HTTP request to bank.com/transfer.php

If this is a regular HTTP POST (ie submitting a form, and the browser window changes location), the browser will allow it.

If this is an xhr POST, the browser, following the same-origin policy, allows the request, but prevents accessing the response (unless allowed with CORS).

[EDITED with tgsovlerkhgsel's help!]
> Multiple blogs I read sell RSS sponsorships

Sponsorship is a poor substitute for subscriptions and ads.

> RSS feeds are, you know, ultimately web pages, analytics are relatively trivial.

No, the aggregator that shows the RSS results has no standard way of reporting to the publisher who viewed which RSS entries.
Yes, this is why I hope there is an account associated with it that can be tracked by the usual sites (rankedftw, sc2unmasked) etc.
> Breaking the government monopoly on currency threatens everything about him

This is naive. Breaking governments’ holds on currency would be supremely lucrative for bankers. See the American free banking era.
Nope. The starcraft AI eco-system is vibrant exactly because it's hooked directly into the game plumbing. No hacky ML stuff involved.

Basically SC1 was reversed via memory location reading and was long the staple playground for AI competitions. University teams and what not.

Blizzard knew of this and silently condoned it. When SC 2 came around they helped move things over because who doesn't want that epic AI PR.

Not 100% sure how it's achieve technically on SC2 but blizzard is definitely actively helping push this technically. (within limits - they counterweight is they don't want to help cheaters hack their stuff)
> And the motivation is maybe to be able to toggle boolean values with one instruction?

You can already do that: use XORI with immediate 1 to toggle.
It really depends.

If I can do it in numpy, I can probably get a lighter, faster implementation with Python than in Java. More generally, if I can do it with a Python package that's actually a fairly thin wrapper around a C, C++ or Fortran library, then Python also has a decent chance of being the easy winner.

If none of those situations apply, then yeah, typically Java ends up being more efficient.
There are people playing with them, but I don’t know how mature they are. Actix is one example.
Redlettermedia have made a lot of 'normal' people aware of just how aweful movies and the movie-going experience is. A lot of times it's more entertaining to watch a group of friends absolutely destroy a moviethan it was to watch the film.
Any type that you have "a lot" of, is a bad candidate for a class/object. Your OO program should typically never instantiate thousands of heap allocated objects at once.
A triangle mesh is a good object candidate. One triangle or vertex is not. A device, a render system API handle and an image is a good candidate, one pixel is not, and so on.

So don't use a lot of objects. In C# you use a struct and arrays of them to avoid creating an object on the heap per array entry. In java you have to resort to SoA, in Python it's the same. Just because you have objects doesn't mean everything should be an object. Even languages that follow an "everything is an object"-design usually have an escape hatch such as plain value arrays.
I agree that 8x Thunderbolt 3 is probably excessive, and I wouldn't want to trade away the current connectivity options as was suggested.

> If you take away the bandwidth from Thunderbolt 3 it just becomes USB

It becomes low bandwidth Thunderbolt / PCIe. You could still use it to attach PCIe devices which don't need a lot of bandwidth. GPUs can be attached for high performance compute where CPU-GPU bandwidth isn't critical. PCIe has non-bandwidth benefits over USB such as DMA and interrupts.

> why not just offer USB connectors which have even broader support and not as many cabling restrictions?

You can't attach PCIe devices via USB, but you can attach USB and PCIe devices via Thunderbolt.
At first I was holyshit not another toy-app startup, but the scientific method the founder used here is pretty mindblowing, we take coffee each day and never realise the economics and science behind it :)
Yes, sorry I was imprecise. I meant reusing IVs for equal blocks only, to be able to see duplicate data.
Court Allows EFF's First Amendment Challenge to DMCA §1201 to Proceed
The headline implies it's about the TSA, or about airports.
I also worry users would be vulnerable to attacks from malicious individuals who know they lost their key.
What if an attacker covertly steals the victim's secret key/credential and then deletes it from the victim's device?

Maybe the victim thinks they accidentally deleted the key or whatever ("oops, my hard drive failed"). The victim then goes to recover their account, thinking that there will be no problem because nobody can possibly challenge them. Then the attacker denies their claim and doubles their winnings!

What makes this especially bad is that the victim's second loss is likely to affect them more than their first loss. Most people aren't going to put their retirement savings or paycheck in Bitcoin - it's more likely to be discretionary income that isn't going to kill them if they lose it. The escrow money is less likely to be discretionary income - it'll be real money, not funny money that has been sitting in their Bitcoin wallet for 5 years.

So now the victim is in a really bad position and the attacker has significant leverage over them. "Hey victim, I'll give you your life savings back if you do insert_illegal_thing_here for me."
(clickbaity piece on topic, sort of)

Metal drinking straw fatally impales woman through her eye after fall

Elena Struthers-Gardner, 60, suffered brain injuries when she fell onto an eco-friendly metal drinking straw which impaled her eye, an inquest heard.

https://www.msn.com/en-us/health/health-news/metal-drinking-...
Supreme Commander also allowed continuous zoom because the maps were generally much larger than Starcraft.

I HATED the fact that Starcraft II wouldn't let me do this when it first came out.

I loved Starcraft I, but the emphasis on twitchy play meant that I simply couldn't be bothered to finish Starcraft II.
In very few places in America is walking/biking more efficient than cars. The author is not saying autos are inefficient, which is a valid argument, he is saying there is a conspiracy ("automobile supremacy") to supplant other forms of transportation with the automobile. This is simply foolish.
You missed the point of his post. It's a thought experiment to demonstrate the intolerance of bikes in the US.
>There are all valid questions (and not the only ones).

To me, those would be valid questions if we proposed Sal Khan -- and only Sal Khan -- to become the official & approved math video for all students which means we ban every other alternative teacher (virtual or in-class) teacher as a choice. Nobody is proposing this.

Even if (many) viewers don't like Khan (dislike his voice, his handwriting, whatever) and are still confused by his presentation, it's irrelevant because the underlying problem still remains: the local person that happens to be physically present in that classroom may be a terrible teacher for lecturing the students.

Therefore, optimize the lecture portion (the 1-way communication phase) by finding the best virtual teacher for the topic. This means 2 different children in the same classroom may be watching 2 different video teachers at the same time. (The in-class teacher can even help the student find a presenter that resonates.)

The remaining classroom task for the (possibly terrible) teacher is isolated to interactions like answering questions. The 1-on-1 interaction is the higher value phase of learning. The lecturing portion where many teachers drone on in a monotone voice and students are bored and tune out is the lower value phase.
To be pedantic, 10% = 0.10, which is has no unit, so it can't be added to a dollar amount.
Individual mutualisk micro and perfect worker harass without decelerating are very very strong in Starcraft:Broodwar
Duffin-Schaeffer conjecture has been claimed to be solved [pdf]
WSJ Tech news briefing
Do you trust the Chinese manufacturers to put out anything with a remotely similar quality and safety as Airbus and Boeing?
While I don't doubt that could have had some impact, somehow if Boeing's 737Max had no ongoing safety investigations I don't think this deal would have been canceled.
Because you can have many concurrent proofs of ownership.
For example someone sells a land twice, the first buyer leaves for 20 years and them come back with a better proof of ownership than the farmer that worked there 19 years.
Agreed. Scooters are more compact, so by building dedicated parking + charging spots, you can make them easier to find and keep charged, not to mention reducing theft. One spot could accommodate 50 scooters in a purpose-built shelf
Outside of self learning and higher education, I cannot see even the best recordings being anything more then supplementary material in education. A good teacher is able to shape a lesson in preparation and during it's delivery to meet the needs of her classroom/students. A recording can be used to deliver a high level overview, but it will require reinforcement afterwards by the teacher. Why not just let the teacher teach and reinforce where needed during the delivery?
Disappointed. I was hoping to learn something useful, instead "you can open a company without an ID" - anyone can do it. But what about making money?
Are there microphone-blocking phone cases? All I can really find is https://www.privacycase.com/, and it seems like overkill.
Personally I would rather consider this to be a smudge on a resume, because for me it means, that that person worked for something, that is known to not be a force of good any longer, probably for money or wannabe fame "Hey, look, I worked at Google! Look how good I am!". Maybe it will work with HR people, but personally in my eyes Google on the resume disqualifies you from being hired.

To work at Google has to be an ethical decision by now. If you are not at Google internally working against its evil tactics subverting it wherever you can and work against its taking over the web, then you are probably working for the evil machinery. For an entity spying on people wherever it gets the chance, seducing uneducated people into helping them to track as many people as they can online and shred their privacy, while trying to come up with "new standards" all the time, trying to make others jump on the bandwagon to unfree Internet.

So in general, a person with ethical concerns should avoid working for Google, no matter how good the pay.
To be clear, this lawsuit specifically takes on §1201, the anti-circumvention provisions of the DMCA.

From the Wilson Sonsini Press Release:

> In a big win for critics of Section 1201, the court held that Green and Huang satisfy the injury-in-fact requirement for Article III standing, meaning they have standing to challenge the statute on First Amendment grounds moving forward. In another big win, the court affirmed that "code is speech"—and thus protected by the First Amendment—and that using code to circumvent technical protection measures "arguably implicates" First Amendment rights as well. In so doing, the court dismissed the government's assertion that Green and Huang's desired acts of circumvention are not protected speech. Finally, although the court dismissed Green and Huang's facial challenges to the DMCA as an unlawful prior restraint, it concluded their "as-applied" First Amendment challenges can move forward, denying the government's motion to dismiss that claim.

https://www.wsgr.com/wsgr/Display.aspx?SectionName=publicati...
Could it be the case that contemporary governments and economies are just simply not structured to be forward thinking in this way?

What if, in analogy to the transition out of feudalism, the next evolution of government and economies is one that allows for spending on future outcomes in a way that is impossible now? I have no idea what those institutions would look like -- I only know that hoping to solve global problems with the caveat that it needs to be profitable for someone has a whiff of obvious nonsense to me. And I also know, that at least in the US, the prospect that the government will implement large-scale change is patent nonsense.
Seems to be an error in editing:

> ...which received a rating of [stackoverflow] (https://stackoverflow.com/questions/29290359/existence-of-mu... -python / 29419745). In additioobjects liken, it can be used to reduce the size of objects in RAM...
No need to make it a weird gender thing.
Not as helpful as bike lanes that let you bike there safely.

To get to my previous employer, I had to bike across a freeway overpass with exits/entrances and high speed traffic, and then ride along a two lane road (35mph posted speed, 45-55mph actual speed) with no shoulder. Despite being an avid biker and living only 4 or 5 miles away, I only biked there a handful of times, dealing with traffic was too scary.

There was a rarely used bike rack by the front door.
Wow that makes more sense too. Basically, don't implement GET in any remotely-sensitive API that actually causes changes in the remote system/service?

EDIT: Why isn't there a header that web servers can give out to browsers basically saying "Don't use the cookie/session I'm giving you ever, unless you're literally on this site"? I could see this being very useful for banks or other origins where they expect no requests except from direct users.
> But if malicious client code got a hold of a user's session (using XSS or what have you), I'd be open to them steering my user's session

I think the point of this stuff is that, if the user's session is stored in a cookie, and malicious javascript can send HTTP requests to your site (that will use whatever cookie is already present) and read the responses -- they can steer your session without needing to get a hold of a user's session using XSS or anything else.

They already HAVE a hold of the user's session, because they can control the browser, which does.

The point of cross-origin restrictions is to prevent JS loaded from one site from steering the user's session on a different site. (Maybe among other sorts of attacks).

CORS lets you disable those protections. `Access-Control-Allow-Origin: ` disables them entirely.

I could have some of this wrong, I find this stuff confusing too.

But I believe they do not need to "get a hold of a user's session (using XSS or what have you)" in order to steer a user's session under `Access-Control-Allow-Origin: `
https://www.loom.com/share/2a3a8d3b4a79484d9f00db86ba08c925
Should be easy to spot based on the demo. Look for the one with way more gatherers than anyone uses, a bunch of disruptors getting amazing micro shots, and groups attacking up ramps in ways human players usually don't.