skysight-inc/HackerNews huggingface dataset:
Honestly I'm expecting the whole industry to crash hugely. I've received so many free cinema tickets to mainstream cinemas in the past 3 years that I haven't once actually paid to see anything by a major studio in that time, and I'm someone who goes to the cinema once a week on average.
Much like MoviePass I assume _someone_ is paying for all those trips I go on for free, and when they stop paying I'm not going to go anywhere near 90% of those films. Meanwhile the specified prices of cinema tickets have grown and grown to the point that I'm honestly appalled when I hear how much people go to see such and such a new blockbuster on release day.

And on the TV side of things Netflix seem focused on making consumable content over anything that endures. I can't think of any shows of theirs that're going to age as well as HBOs finest have and I can see that being an issue in the long term when they don't have these kind of pillars to fall back on.
It all seems focused on hyping people up into subscribing and then hoping that they forget about the subscription cost indefinitely.
I'm aware of OPTIONS but it still seems like the same exact stupid browser security hole (edit: or perhaps I should say HTTP protocol flaw?) being half-patched on the server side. Like, I'm saying that -- independent of the HTTP method -- there should be no communication of privileged information in the first place by default. If a website really wants other arbitrary websites to send e.g. a cookie along, then there should be a way to mark that cookie as such at the time that it is originally set, not having it checked post-facto. It sounds like the only reason this is done is backward-compatibility?
I would have to agree there.
Orange oil kills ants as well as spiders, etc. Baking soda is only used for ants and roaches, mixed with sugar.
As a motivation to use: To prevent other sites using your resources, causing you an extra bandwith cost.
Yeah.

At least the "dumb" cable I use in the car with my phone is dumb enough to feed power to the RPi4 anyway, so I'm going to keep the device and just remember to only use it with cheap, dumb cables.

I was very confused a few days ago when I plugged it into the MacBook Pro power supply, thinking "this ought to have more than enough juice for the Pi" - except the thing stayed dead and silent altogether. :)
Can you point me to some documentation for dynamically allow-origin header? I’m working on open sourcing our frontend and so if users have their own frontend on their own domain, how do we allow those calls to our backend with CORS? If we turn CORS off, is this a security issue? From the frontend, we send a JWT with the header and check this for protected routes on the backend.
This is in the article. No, it can only deal with things that are visible to it.
Whoever cares about climate should also read about the biotic pump theory.
Would it be better if their journalists all just ignored the issue, or issued corporate-approved screeds about how whatever it is that their corporate owners are doing is just fine? Because to me both those options seem worse than hypocrisy.

I'll grant you that diving into Google's TOS without mentioning their own is a bit tone-deaf.
I read extensive parts of the CORS specification and it is indeed teflon (and just as toxic as teflon as well). The spec is full of exceptions and leaves many choices to the browser vendors.

To truly understand CORS, you have to fundamentally understand 'the origin' as a security and execution context. Sharing means that content normally intended for another origin is shared with the initial origin.

Perhaps that is blatantly obvious and you are more confused by the myriad of headers, exceptions and lifetime. In that case, I propose to read more of the spec.
We use balsamic vinegar (or wine) to lure fruit flies. I make a trap with paper, scissors, tape, a glass, and vinegar. Get a clean glass and fil it with a few cm of vinegar. From the paper cut a funnel with a small hole (2 mm or so) on the bottom. Use the tape to attach the paper to the glass (use more tape if there are open holes cause else they might escape). The paper will slowly get spots from the flies/liquid. Lasts a couple of weeks. Be careful when you toss it away, so that no flies escape.

We zap flies with an electronic zapper (looks like a tennis racket). There's a couple of tricks I learned from it but yeah just make sure you clean up the mess. The zapper resides on the fridge because we got a young human being frolicking around.
Show HN: Auto-sort your image downloads by content using AI – Stowbots
It’s entirely plausible that employees at small companies aren’t generating value for all the extra time they’re at work. You could make the argument that with a four day work week they’d accomplish the same amount of value generation, and that in the current situation there’s a lot of waste.

People balked when the 40hr workweek was introduced but it ended up lowering injuries and illness and had a net increase effect in productivity.
>You don't have to worry about some other doctors accessing your information in bulk to try and conduct a study on cancer rates.

This not only happens, it's my job (though I'm not a doctor). Of course, it's tightly controlled on my end. I work for the government, but health systems have their own analysts. As part of my job, I have access to sensitive and identifying information.

This isn't to be contrairian. There are existing systems using very personal data in bulk for analysis. The wheel doesn't need reinvented.
At least in Costa Rica beaches are already used for private resort beaches (illegal in law, but meh), extracting salt and dumping construction debris or stealing sand. With those antecedents I don't think the government would oppose to do something actually useful.
Wrong conclusion. The kludge is making cross origin requests in the first place.
Absolutely. And people often try to blame the commuter themselves for their own commutes, when in a lot of cases it isn't fiscally possible to live closer (see all major cities for example).

The real question is: Why are businesses opening in expensive areas and forcing long commutes rather than cheaper areas? And seemingly the only answer is: Keeping Up with the Joneses i.e. show how big and impressive of a business they are by having a HQ in an expensive neighborhood.
Do you mean this? https://github.com/Blizzard/s2client-api
> "when in doubt, free markets"

Monopolies are antithetical to the free market, and vertical integration in industries with high economies of scale does create substantial monopoly concerns! The best market-based solution, so far as we can tell, is precisely to carve out the monopoly-prone "tier" in the industry (this is not always easy as monopoly-potential is not always correctly judged; it's more about inherent lack of contestability creating a sort of undue "power" over the rest of the market, and not so much merely a high market share by any single actor) and require it to act as an open platform to the rest of the market, perhaps even nationalizing it if necessary (this is, after all, the basic rstionale for why many public services are provided by the government). So the regulators in the beer industry may have come out with something quite close to the best known approach, if perhaps not for the same reasons.
Show HN: An S-1 for Prospective Startup Employees
Plus, large numbers of shallow (one or two season) shows plays to Netflix's illusion of choice. The more different "shows" it can show in a carousel the more people feel they are getting from their subscription. That's probably going to be increasingly important to them as other content providers leave the platform, if anything.

I wonder if Netflix had adopted a UX more like Amazon's early on where every individual season shows up at the top level instead of all seasons rolling up into the same "now updated" title card for the entire show, if they would have felt less pressure to do as many parallel shows and might have supported more seasons of existing shows. It's a UX change that likely wouldn't make a big difference to viewership though because that Season X + 1 is probably always going to have diminishing returns of viewership as people fail to complete Season X but feel they need to watch it before X + 1.
MEPs back EU ban on throwaway plastics by 2021
Hi HN! I'll be hanging out in the comments for any feedback. I posted this application several months back for beta users, and I am happy to say it is now launched! Thanks for reading
Sure, but the base week still consisted of seven days, no? In the USSR they messed with how many days a week’s period had. They were not followed by most industry and most of the countryside never implemented these ideas at all.
You have empathy for something mostly despised as a pest. Hackers are thought to have little, but sometimes I suspect we have more, so much more that is really the lack of reciprocation for our empathy others show for us that is the problem.
British shows mostly go the other way. All the classics seem to be one or two series where you wish they'd made one or two more, and series are often 6 or 8 episodes rather than the 10, 12 or "bleeding ridiculous" US series love. As our tv has got more American in style and business we've gained series that just won't die, even though so far past expiry date the corpse is rotting. (Big Brother? Apprentice? Celebrity anything...

The only downside to the shorter seasons is book adaptations often go at breakneck pace and take too many liberties.

As example, The Last Kingdom: First two series were BBC America and 8 episodes that covered 2 books a series. Pretty damn good adaption, pretty faithful to the books even with the brutal fast pace compression, and kept the real historical basis Cornwell is famous for. Maybe a bit tame and a little too "worthy" in places. It's King Alfred christianising early England and killing many heathen Danes, some "worthy" was unavoidable. :)

Third season is Netflix and no BBC, so instant 10 episodes a series, and it's unbelievably fucking shit. The gore, the dialogue, budget and plot all got turned up to 11, all the characters got entirely new personalities and the basis on the books got thrown out the window. Yet it drags and drags, because the highlights are constant now, so no contrast any more. Cornwell's famous historical basis laughed at and pissed on. Shark jumped multiple times. In wanting to make it more showy and mass market they killed any interest of the people who did watch it.

Another reason to think my Netflix sub is nearing its end.
Try building your own house or your own car and then you might have some respect for the amount of work and expertise that goes into it. A house is not dirt with four walls and a roof... that's a tent. I've built one solo, banging nails and cutting wood. Buying one or renting one lets you skip a lot of work.
> the three tier system (production, distribution, and retailing) has numerous advantages

Do you see cable tv as a successful implementation of this? Every few years I'll see news articles and billboards about "Fox couldn't negotiate a deal with Dish." It'll be unavailable for a few weeks until they reach a deal, but in the meantime both sides blame each other and the customer goes without. Not to mention cable adding commercials after charging a monthly fee and constantly increasing their prices. There's also the complaint about only watching 2-3 things--I only ever watched small a handful of channels (I don't hear similar complaints about Netflix).

I can see people arguing that's the system working, or it's failing due to oligopolies, or the practical friction of changing cable services is just different than buying a DVD from Target.
By in large in the UK medium to large size companies work 35 work weeks and holding it against people for family seems to not be a thing. It's a cultural accountability thing.

Balanced time at home/away from work. More time with kids, more nurtured kids, more successful kids. Same thing goes for the individual. More time to yourself, less burn out, better long quality work output, less stressful work environment.
Humans may have reached Europe by 210k years ago
> Can I write a bot to play for me too?

Sure, if you can get Blizzard to specifically allow yours in competitive matches for research purposes.
Could you elaborate more on how the 'compress' part works. Quite curious. I can imagine working with a base pointer and 32 bit offsets.
The GP obviously doesn't mean that 1000+ ppm CO2 is toxic, they mean that the changes to the environment it would cause are less than ideal for humans to thrive.
Anecdotally, influencing can work in certain product categories (clothes, makeup) where you would want some authoritative source to demonstrate that something looks as good as advertised.
> Starbucks is the largest chain, but they only process 2.5% of those daily sales.

Seriously shocking.
Olivine is mined at $25/ton right now, which presumably takes capital requirements into account, so that's less of a concern from my POV.

The need for $900 billion to make this work (or even $300bln if the olivine price really drops as they predict) is the hard part. But then, the alternative is pretty much climate collapse, so it's still a bargain. Question is if people will realize that soon enough. But yeah, definitely not paid through jewelry. I'd imagine an actual emissions tax with teeth might help.

As for ecosystem impact, let's for now just look at a per-country amount. CR is 5M people, ~1.6tons of CO2/yr, so 8 megatons. With 800 miles of coastline, that's a lot of rocks - if they were only deposited on the beach. But it can be dumped in the water as well, if the currents are right. See e.g. https://projectvesta.org/science/#dflip-df_90/26/ (Not CR, but Europe, and basically says "pour it in the Channel")

I don't have the weathering rate, and the claim in their booklet (p. 32) actually doesn't make sense to me, so that's the big question for me as well. AIUI, this is the big unknown - they claim the old numbers don't apply, but they need to run a large-scale test to actually tell what the numbers would be.

I'm not, to be clear, saying "don't be skeptical". I'm merely saying as far as CO2 absorption ideas at scale go, this is one of the saner ones. It's not immediately unfeasible, and we should probably test it.

(As you can tell, I'm a fan of arguing on the Internet ;)
>What I hear all the time with programs like this (where politicians almost have the opposite problem) is basically this type of (slightly made up) media dialog: “won’t it be dangerous to force children to ride bikes from age one?”

>“Yes, but if we are to meet the emission goals by 2025 we have no choice”.

Yeah, I don't think that you will succeed in convincing any parent with this kind of argument. Getting their kid hit by a car is a way more "real" and tangible concern for parents than some abstract emission goal.
>As to humans, 400ppm causes zero problems

You mean it causes zero known problems.

Medicine and biology are not yet advanced enough to say in most case whether putting the human body in a condition humans haven't experienced in 800,000 years is harmful. It took decades to learn that asbestos is harmful. If the harm caused by asbestos were cognitive decline rather than shortened lifespan, it probably would've taken longer, and cognitive decline is the effect that appears at the lowest concentration of all of the known adverse effects of co2. (One study found cognitive decline after 2.5 hours of exposure to 1000 ppm.)

Plants use co2 to make their bodies just as we use proteins, fats and carbohydrates to make our bodies, so I am not particularly reassured by knowing the plants thrive at very high co2 levels.

Graph of co2 levels over the last 800,000 years: http://kaltesonne.de/wp-content/uploads/2017/03/co2-1024x576...
For those who don't know, MOOs (MUD, object-oriented) are text based virtual environments that were quite popular in the 90s. Sort of like the classic text adventures or RPGs combined with chat but with the ability to extend the text based world through interactive programming. The most popular MOO software was LambdaMOO. I thought it was dead (it arguably is) and was suprised to find this relatively recent collection of material.
"It is in the corporations best interest to exploit the worker as much as possible..."

I agree with you entirely. Most people don't see themselves as exploited. Yet when the salary to hourly calculation happens and then an adjustment for actual hours worked happens (a regular 60 hour work week instead of a 40) lots of salaries suddenly look much different in the eyes of those making them.
The other quieter announcement is that AlphaStar can play as multiple races. The first public version just showed playing as Protoss.

There's some controversy about the AI's field of vision. A person is restricted to using the small mini map for the "whole view" of the playing area. Whereas AlphaStar can view events without a visual restriction.

But, if you're into following competitive games the broadcasted match of AlphaStar vs Lambo is pretty incredible to watch. The AI used new and novel strategies that weren't considered before.

The AI showed that Stalker can be actually a superior unit to the Immortals if they can be micro'd efficiently.
Not as polished as Soulver and Numi, but maybe Frink is something for you: https://frinklang.org/
> If they don't, well, Hacker News is full of people like me to shame them for excluding people from using their website.

And the absolute number of HN people like you shaming folks for not supporting text-mode browsers like lynx is a rounding error for most websites.
Create your Stripe token client side, send it to your API, indicate to the user that the payment is processing.

Your backend stores the PCI-compliant Stripe token in a queue which a worker processes as and when it can - therefore allowing you to mitigate Stripe down time.

The issues then become one of UX if the payment fails.
>People lament Java memory usage but Python/Node use several times more

The people who lament Java's memory usage never complain about Python or Ruby because... if you're worried about the JVM you would never consider Python!
FYI: found a pretty neat paper describes a new sharding design for proof-of-stake blockchains

I think the company that's building it just announced or opened up a beta program too
Smaller, 32 TiB.

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide...
I would worry about rich people being able to use this nefariously. For example, I could make Escrovery requests for a whole lot of bitcoin accounts with large balances (which I can see on the blockchain) and just hope that enough of them don't respond in time to make the costs worthwhile. If for example the escrow fee is 1% of the value of the wallet, and I do it for 100 accounts of roughly similar value, I only need 1 of the 100 to not respond to break even, and 2 of them to come out ahead.

So it will be very important to set the escrow value high enough to prevent this but low enough so that people who have legitimately lost their account can still recover their own accounts.
Maybe, but people want to write applications that can easily interact with each other in a secure way. Trying to do that when your browser implicitly authorizes you no matter what the origin of a request is makes that extraordinarily difficult to do safely. Adding in the backwards compatibility problem makes it even worse because any solution is going to have to work with the existing methods.
Definitely agree it's a cultural issue which needs to be solved. You need leaders who can enforce work/life balance from the top down, and employees willing to rapidly move when a company doesn't have the will to support sane work/life balance.
The Efficient Market Hypothesis gets a little fuzzy when it comes to advertising. More than a hundred years ago Wanamaker remarked that "Half the money I spend on advertising is wasted; the trouble is I don’t know which half", and despite all the advances brought about by the internet the situation hasn't changed all that much. It's still completely plausible that Instagram influencers can make money despite being totally useless.
Were they the legal owners of the copyright? Yes. Did they post the material themselves, yes. Have other companies posted their own works in slightly corrupt form to thwart pirates? I expect yes. Do other companies sue pirates for downloading their material? Yes. Do those companies typically sue for an amount less than a value which would cause the pirate to go to trial? Yes. The only difference I see is that Prenda uploaded “good” copies and sued. Had they uploaded corrupt copies, with a link to their website where you could download the files for $1, and a third party then uploaded the non-corrupt file to BitTorrent, it seems very close to what the large corporations are doing.
So how does this prevent any bugs which aren't already prevented by the language?
Well, it depends what else the server is doing besides talking to the network. Low-overhead concurrency matters when you're basically just copying data to the network, like serving up static HTML, images, or video. Particularly when clients have slow network connections, a request can take a long time with nothing much happening on the server. If most requests are mostly idle, the server can handle many more concurrent requests with lightweight concurrency.

With heavyweight computations, CPU usage will hit 100% with a small number of concurrent requests, so a thread per request will work fine. Your server will get overloaded before you have too many threads and that load needs to be shed somehow, maybe by putting more servers online.

Even if you're using async-await, using threads for heavyweight requests is recommended anyway. An async function isn't supposed to hog the CPU; instead you outsource to a thread pool.
What if I’m poor?
Health and wellness are your own responsibility. Everybody wants to blame some amorphous "X" culture for their problems, though.

If you're running yourself ragged at work, ask yourself why you're doing so. If it's because of a perceived social obligation to do so, then it's up to you to recognize it's just that - it's social pressure, not a physical force keeping you at your desk.
Humans and Neanderthals in Europe Is Being Rewritten
Go to Google, seach "Dear Google, I'm Blocking You From My Website" (with our without the quotes). You will find this very page and other link-sharing networks. Go to Duck duck go and search "Dear Google, I'm Blocking You From My Website". Without quotes the results are nonsense. With quotes you get 0 results.
Nice! I’ve been spending a lot of time with Radul’s thesis, which is also on propagator networks, trying to follow along and implement a reactive framework using its teachings. Fun times
Do you specifically want to get laid off?
The author suggests that using CORS to allow https://zoom.us with http://localhost:19421 is possible. This is factually incorrect. Mixed content policies prevent the http: origin from communicating with the https: origin.

"For very intentional reasons, the browser explicitly ignores any CORS policy for servers running on localhost."

That last sentence is incorrect – Chrome does respect CORS headers for localhost webservers.

It's only partially incorrect. In most cases, CORS will not work with localhost, at least without a self-signed certificate trusted by the browser.