skysight-inc/HackerNews huggingface dataset:
> CORS is a mechanism to loosen security, not increase it.

Or we could call it CORB instead (Cross origin request blocking), and then we see it's a mechanism to tighten security. Since fundamentally, what we have is an agreement against major web browser vendors that blocks cross origin requests unless the web server authors have used CORS.

I mean, how many people have encountered a problem with CORS? Almost no-one, and those that have encountered a problem with CORB and solved it by enabling a shitty CORS that opened the doors. (At least, they're fixing security holes in software that was written by devs who encountered a CORB problem and fuxed it. But all CORS problems follow a CORB problem.)

If we called it by its true name, maybe it would help people understand what's happening. Names are important. If developers understand CORB, they will potentially understand CORS. But no-one can understand CORS till they've understood CORB.
It bothers me that people weren't more upset about this part.
It's not about using objects or not, it's how you compose them. A C# array of integers is an object. Each integer in that array is also an object (though granted, it's a special case). Numpy arrays and javascript typed arrays as well.
In the utterly amateur teaching I have done the key thing, which someone will never get from a computer, has always, always, always been convincing the student that they are smart and that they can learn this stuff or indeed anything. Next most important is generic how to learn stuff, which for the people I have taught usually starts with relaxation exercises and other techniques to overcome their fight or flight reactions to get to a place of relaxed enjoyment.

I don't know how that replicates to other, better, more experienced teachers observations of it. If it is as important as I think, I don't know how you get that from a computer.

Learning and study abilities are tortured and murdered by the constant re-enforcement of "you can't, you're not smart enough, them over there, they are better."

Maybe I'm over emphasising a point that is less important than I think but also maybe not. It's a point that needs an airing here either way. Interested in your thoughts, especially if you have experience.
Getting married to someone you just met on a dating app would probably be a bad idea. It could still work. Arranged marriages aren't much different.

Aside from that, there's no issue using a dating app to find that special someone you should marry. Same goes for founder dating. You have to start somewhere.

In any case you should try working with your potential cofounder first. A friend isn't necessarily a good cofounder.
As nice as that sounds, I think it requires an impossibly perfect prediction of future events. You face ethical decisions whenever you have power or limited resources.
Yeah you’re just looking at the version of the xprotect binary, not the malware signature data files, which don’t live in the bundle and get updated more regularly.

They also ship silently via system_installd, you’re not going to see anything in the software update GUI
4% loss of what? I’m not following.
Tangential, but I like the website. Has a similar look and feel to the Rust book. Same backend?
I for one purposely worked remotely for at least 75% of "viadoom" specifically because of all the warnings beforehand. Many of my coworkers did as well. That may have had something to do with everything working out? They warned us very much in advance to make plans to deal with it, and people seemed to.

Another anecdata, the days I did commute in the bus was at least 50% fuller than "normal".
Doesn't "Add and Remove Programs" just run whatever custom Uninstaller came bundled with the program? Is there anything it can do with programs that don't come with an uninstaller?
The New Moon illuminated by Earth light during a solar eclipse totality
Either way, the universe will undergo heat death. So on very long timescales nothing will be left. Also, we don't have
"billions" of years on the planet, more like 1 billion tops. Life on Earth is on its final stretch.
I mean. The issue at hand was that they purposely left the webserver behind to auto reinstall if a zoom link was clicked. This was an intended feature, and the same could have been done on Linux or Windows. Package management or containers are irrelevant to this conversation.
@pbiggar's cofounder here!

+1 to everything Paul said, especially cofounder therapy.

The other thing that really helped me was understanding what I wanted from a cofounder (philosophically, skills-wise, ideology) before I was making a this person-or-not decision. Feels less personal.

I got that knowledge by doing many hackathon/intense sprints with other people to figure out when people tended to not work for me: https://blog.ellenchisa.com/startup-lockdown-day-0-576d2d7d4.... I also had a good sense of traits that others found annoying (esp when they quit other jobs) that I felt fine with.

Other useful things:
- Explicitly naming "red flags" and things we were worried about.
- Calling Paul's previous cofounder (who graciously agreed to talk to me).

As a random thing I still find interest, I said no when someone tried to warm intro me to Paul, but agreed to meet when he sent me a cold email. Felt more sincere somehow.
Faster computers, and more of them.
The Lifetime of an Android API Vulnerability
I use stick figures, shadow shapes, etc. This differentiates my laptop from all the others in a crowd of them, and does it with my taste.

I’m with you on advertising - not interested.
Rovers Will Unroll a Telescope on the Moon’s Far Side
It seems to me that Facebook has structured Libra coin to avoid banking & securities laws. By bringing in 20 of his closest Wall Street friends Zuckerberg is attempting to rely on prior SEC commentary that BitCoin is sufficiently decentralized to keep the tokens outside of securities regulation.

And even though Libra claims the tokens will be backed by a basket of global currencies they’re still acting like a bank. That basket of currency will fluctuate in value. Libra is basically offering a riskier and unregulated money market account.
The signature files also live inside the XProtect.app bundle, unless in true Apple fashion they’ve got other stuff that’s lurking elsewhere in /System that I can’t locate.
No shoggoths?
that is explicitly incorrect. macos has a very nice and effective way of packaging all the components needed by an app into tidy bundles.

the problem in this case is that the developers just couldn't be assed even trying.
It's been rather disturbing to see this whole thing play out --- I'm not taking sides here, but Apple "flexing its arms" in this manner shows that it is willing and has the power to go beyond policing its App Store and such (which while I do not like, I feel it does have the right to) and involve itself in the affairs of third-party software which it did not originally install. (This is subtly different from updating things like OS files, for example. Some other comments here suggest that the installation of this update is controlled by a setting described as being for system related updates, which a user would expect to leave his/her third-party software alone.)

You may agree with its decision this time, but will you always agree? Apple's wielding of power in this way is likely to attract the attention of groups such as copyright/IP lobbyists, which have an immense desire to have all "non-authorised" files/software erased from all user's machines.

As the saying goes, "two wrongs don't make a right".

In any case, the idea of the OS/platform vendor meddling with third-party software that it doesn't like just feels wrong. I know Apple has historically held tight control over its mobile platforms, but the Mac is meant to be different.

I am not an Apple customer, and I now feel even more reluctant to become one.
The Fed is certainly more accountable than Facebook. The Fed chair is appointed by an elected president; Mark Zuckerberg is appointed by various unelected rich people.
This works great as a reality check to see how my idea isn't as original as I thought.
Can you point to a scientifically predicted and demonstrated (not just speculated) consequence of climate change we don't know how to deal with?
> This won't work for them forever

You are under estimating the power of formula. Disney had a huge run with prince-princess stories for kids and they only recently toned it down because of huge negative effects on kids. They can easily go on forever on this theme if they want to. Vast majority of movies made in Indian cinema (aka Bollywood) are information-less and even story-less movies that just revolves around one thing: Two people fall in love and there is some problem. You can literally find identical story lines in other 100s of Bollywood movies. Very very few people there has given thought to making movies on something else. This has been going on for about 50 years there and no signs of stopping.
Sure, so it means you should be "dating" for a longer time before you start a company with someone. I'm just not sure I understand the point that's being made here, because it sounds like it's impossible to meet your future cofounder unless you've already done something with them, which is a pretty obvious catch 22.
it really does provide a very nice and effective standard way to bundle components needed by an app altogether and to manage them appropriately.

The developers in this case didn't bother trying to use it.
Apparently they did that in the 90s and wound up stepping on their own feet. It turned out that it's more profitable to make the buyers wait. Plus there's a healthy negotiating chip: pay us more and jump the queue.
Those are in Antarctica.
> Some other comments here suggest that the installation of this update is controlled by a setting described as being for system related updates, which a user would expect to leave his/her third-party software alone.

The setting is called "Install system data files and security updates": it's not just system components.
You surely meant "expiration". Expiation is something else :)
How do you feel about Windows Defender?
That's academic advisors, not professors.
Seems to me the consumer response to this should be what happened to Uber. Everyone simply asks for arbitration. At over $10,000 per person, T-Mobile might soon be begging for a single class action.

https://www.latimes.com/business/la-fi-uber-ipo-arbitration-...

Does anyone know what the pitfalls are? Is everyone asking for individual arbitration really feasible?
You probably won't see this but in case you do...

> Human nature rules the development and use of technology, not the other way around.

No, I believe that, I just have different beliefs about human nature than you do.

If climate doesn't clobber us I'm pretty sure we'll come down on the side of governmental transparency and the rule of law. But only time will tell, eh?
If you by innovation means coming up with loop holes then yes. If you mean it leads to some fundamental innovation that improves the taxed subject then I am pretty sure you would be hard pressed to find anything backing that claim up.
Yes: the annoying ones open up iexplorer.exe and ask you to fill out a survey of why you're uninstalling them.
Not directly accountable but still much more accountable than Facebook is. Even in a non-elected position there is still a duty to the people and greater good rather than fiduciary duty to shareholders.
Nice, thx for sharing!
Amazon, Microsoft wage war over Pentagon's 'war cloud'
> And politically-framed studies are worse than nothing, because they're partisanship masquerading as facts.

You had me until the very end. You made a very persuasive argument regarding the framing of research questions. The problem is that it's too persuasive. Clearly almost all studies are heavily biased by their framing, and it stands to reason politically-based framing biases abound in science generally.

IMO, we'd be better to err on the side of more empirical data and empirically informed policies, however flawed. And we should be prepared to mitigate biases with more data at least as much as we're prepared to shutdown research altogether, which as I understand was the outcome of the CDC research--they're prohibited from studying gun-related issues altogether.
it sounds cheaper, just based on the idea that all you need to do is mine something, move it and spread it.
Amazing how entitled random people on the internet feel about somebody else's project to demand they remove their logo from the website!
Farewell to Microsoft Internet Games on Windows XP, Windows Me, and Windows 7
A lot of assertions there. You lost me at “Forestry changes aren't nearly enough to offset anthropogenic emissions from other sectors”. Can you explain your math there? Is there a limit to how much carbon we can warehouse in trees (living and milled)?
How I made money podcasting and why you probably don't want to
Hmmm....

Stickers in the style of video game powerup pops, but with MHz, GB, etc units....
A lot of the downsides you mention of Windows is quite rare these days. There's much less viruses, crapware, BSOD, and so on. A lot of friends say that they bought a Mac because they never have to shut it down; you can do similar with Windows as well. I seriously considered getting a Macbook last year for iOS dev, but it was too hard to give up some of the things on Windows.
We can harvest forests without reducing canopy coverage and store the wood. You can even grow your forests on top of wood landfills.
There are always exceptions. It still makes it a bad idea.

And I don't think there's anything wrong with using it to meet like minded people who you might collaborate with one day.

But let's not ignore the fact that single founders can be successful too, and one of the biggest causes of startup failure is co-founder disputes, according to YC's own data. The real question is, will it help more than it hurts? The good news is we may know in a few years with this experiment YC is running.
Leaving only Debian as an independent popular distro maker sounds bad for the game.
I'm fine with this. I can always leave Apple and go to Linux if they do something drastic.
I think the difference here is that apple explicitly does not have an "anti malware" configuration section of the MacOS control panel. There's configuration for automated system updates, which most technical people understand to mean security patches and things that are equivalent to windows hotfixes and servicepacks.

I am with the "two wrongs don't make a right" people here. Zoom was reckless and their casual disregard for the initial security report left a very bad taste in my mouth. I'm now highly unlikely to use one of their products willingly. But having Apple initiate unattended removal of software that a person willingly installed on their own workstation machine is also unacceptable, unless they specifically opted in and checked "enable" on something that is very similar to windows defender.
Right but from the summary I feel it seems like a history told from that lens. Just like a different lens causes one to see "the history of society is the history of class struggles".
Google: Why we're pulling out of the Pentagon's $10 Billion JEDI Contract (2018)
Cars tend to require tools by default, but a lot of bike parts can be removed just with your hands. They’re also a lot lighter and smaller, so they’re easier to carry and hide. To take the wheels off a car, for instance, you need to jack the whole car off the ground - with a bike you can just hold it in place.
I mean using this project to counteract 10% instead of 100%. We don't have to rely on a single tool to eliminate carbon emissions, we can use a bunch of them.
Have you checked ProgramData, Local, and Roaming recently? Or your registry?

Also, Add/Remove only works if the program adds itself there. And remove only works if the program added an uninstaller. Also, even then, it still leaves crap behind.
Do you have data on the global capacity for intensive carbon storage forestry techniques? What are you basing that on?
That's why the only safe OS is indeed Linux. Say, Xubuntu or Fedora.

Microsoft has turned the masses into unpaid QA along with extracting their digital wealth. Mac/iOS is a dictatorial wasteland. And Android is adtechs wet dream.
Thanks! I'll see if syncthing is available for iOS and will look at photostructure! Thanks!
Enigma, a code-breaking puzzle game where you compete for real money
I got all my colleagues to uninstall Zoom and related artefacts. I'm sure I wasn't the only one. They probably have stats that show this. Too late for me. We will just never use it again unless all other improving options suddenly fail (which is highly unlikely). This isn't because I hate Zoom or and annoyed at their response, it's because it's too late. I've uninstalled it and most likely won't have a reason to reinstall it ever. Reverse inertia.
There have been counter arguments that Netflix and Prime Video has in fact saved Hollywood. If you want to make a movie in hollywood, you have to know people who will fund you. You need big connections, close friendships, strong referrals. Even then terms are often not favorable to artists, budget cuts could happen at whims and non-established artists have little freedom. It's like a startup scene but how things used to be done before YC. With Netflix, I think what has happened is that humanity has collectively handed over $10B to one company to create entertainment for them. The budgets are deterministic and not at whims of few people. Artists can take risks because you don't have to count tickets sold. You can create artistic content that has expense and income numbers that don't make sense because eventually it balances out in the larger pool. Suddenly there is lot more money for artists and lot more freedom. It's still not quite like YC where you show up with idea for your movie and instantly get funded but its getting closer to that model.
> Additionally, satellites are always watching everything all the time.

Where's MH370?
We aren't projecting anything, we're observing this expansion backwards as far as we can see, right back to around the CMB.

To take your analogy, we witnessed the expansion of the metallic sphere from a point too small for us to see, there may be more going on that we don't understand, but it certainly looks like it expanded out of nothing.
I don't know, I'm still firmly in the camp that the URL bar and search bar should be separate. When I'm typing in the URL bar, I expect it to attempt to resolve and request whatever I typed in. If I wanted to search, I'd search. This has caused annoyance with some single-word DNS names not working and performing a search instead. I'm still not entirely sure why some words will do DNS resolving and some don't.
It’s been well over a decade since the original Aladdin was released. This isn’t exactly complaining that people keep on staging Macbeth instead of newly written plays but it’s in the same direction. Critics and connoisseurs care far more about originality than casuals, who are always all about competent execution. Is the movie any good when judged as a singular work? Is it good if you’re not jaded by having watched a movie a day for years?
I suppose that depends on the application of the transitive property of English grammar: "Install (system) (data files and security updates)" or "Install (system data files) and (security updates)"
lol they removed what would be called horrific spyware if it wasn’t made by Zoom and you’re over here on some lofty criticism about possible implications years into the future

any OS (and many other apps) that update have the power to do what you’re afraid of, and much more.

plus i don’t really see a bright line between system level software and an app when apps can access your video cam, mic, all your files - basically your whole computer.
apparently people associate it. also , it's the repeated aspect of it, familiarity, and often exposure and publicity of other sides of athletes.
I’m sure Apple is as upset as anyone else. It effectively breaks their sandbox model so they’ll probably be working hard on a way to plug that hole gracefully.
Does this mean if you sign up for startup school that your idea is shared with everyone?
Isn't most of this because of legal reasons though? You can't really leave out a lot of the language without being more vulnerable in court.
Thesis: Developers don't understand CORS. So I read it. All along the author does not attempt to explain CORS to me. I then Google CORS, and think I do understand it already, but this guy is telling me I don't, but completely fails at explaining why I don't. Maybe I don't understand CORs, but the author didn't help anyone with this piece. This received 508 upvotes...how?
Let’s build an alternative that helps people connect to Visa/MasterCard

Oh wait... we can’t!
Stupid question: How would you even accomplish an SPA with server-side rendering but no (client-side) JS at all?

SPA to me implies that essentially all the content is fetched not via traditional navigation but AJAX requests fetching pages/content etc. and the local JS code making sure to switch out the currently displayed contents.

My understanding was that server side rendering simply speeds up first load of an SPA since it doesn't need to be rendered on the client, but then you still need JS to actually get any additional content and navigate.

I guess one could build something that looks/behaves like a traditional web app with links leading to new pages that are rendered by the server and if JS is enabled switch to what I described earlier. Would the former really be considered an SPA though?
There’s reason to be skeptical.

Here’s a lengthy twitter thread diving into the reincarnated ancient nematodes mentioned in the article: https://twitter.com/jacquelyngill/status/1148770899065266176...
Apollo 11: 'The greatest single broadcast in television history'
So this seems to be the thread for the malcontents. I was recommended this book enthusiastically and dropped it after only a few chapters.

My issue with it is basically this: Harari's original insights and opinions are only mildly interesting. There is no single thesis presented (at least as summarized) that justifies an entire book. By grafting those ideas on to what is otherwise a rather dull exposition of mainstream anthropology, he impresses the less educated audience with knowledge, while lulling the more educated into an agreeable attitude by restating the well-known, at length.

It's a common persuasion and marketing tactic: Fact, fact, conjecture. Fact, fact, conjecture. Fact, fact, fact, bold conjecture.

And of course, being unwilling to slog through the filler, I'll be written off by Harari's acolytes as ignorant. But that's OK. I'm starting to regard the rejection of pop phenomena like this one a necessary self defense of my own time and attention.
I cant speak to the GP comment, and I understand the catch 22, however IMHO your history need not be long with them, but I think it is very important that the history is on where you've seen their honesty+integrity+ethic under strained conditions, ideally where they dont know they are being directly evaluated.

Imagine your founder and you are sitting on a train and a lady gets off the train leaving behind a huge gold pendant. If you are both together, perhaps he may virtual signal by calling out to the lady. Wow, what a fine gentlemen and citizen.

Now imagine he is alone, you're far off in the corner of the train watching him, it is dark, and he doesn't realize he's being watched -- do you think he might keep the pendant or would he still act the same way?

Then realize that gold pendants arent found every day, so really you're waiting to see how the person performs when they have hard unselfish decisions to make -- the longer you observe people under independent circumstances that more such events you find and then hopefully you can gauge the person's honesty+integrity+ethic.
Putting stickers on my laptop is the closest I’ve come to getting a tattoo.
I hope your day has gotten better. Don’t worry about the math!