skysight-inc/HackerNews huggingface dataset:
I have some basic understanding of it. I'll try to simplify what I know if anyone else is feeling confused about CORS.

- You visit evil.com.

- Evil tries to makes an HTTP request to bank.com/transfer.php

- But before the request goes through the Browser says, hey, wait a minute I first need to make sure if evil.com can access bank.com

- Browser asks bank.com, if evil.com (also known as origin) is allowed by sending an "OPTIONS" request first (this is before making the actual request)

- Bank.com replies in header saying "sure, everyone is allowed" (e.g. my bank), technically by setting a HTTP "Access-Control-Allow-Origin: * " header (or just evil.com instead of * )

- Browser is happy, it makes the requests and you get the data

Of course there is more to this like the server can tell which HTTP methods evil.com can do like "POST", "GET", "PUT", etc using "Access-Control-Allow-Methods". If the browser needs to send the cookies too with the request ("Access-Control-Allow-Credentials"), etc. But that is pretty much the gist of it as I understand.
At lot of that depends on where you live. Southern California has a pretty ideal climate. I'm in Austin and I can manage my 7 mile commute in the summer until the temperature gets above about 102. I'm fortunate that my workplace has a shower.

A 12 mile winter commute in some of the northern states could be pretty dangerous.
I was not impressed with Sapiens, especially Hariri's belief that the agricultural revolution was history's biggest fraud, and his belief that hunter-gatherer societies were better ( I don't know, how when 90% of your time was spent foraging for food and fighting for survival). Everyone agrees the agricultural revolution was the most dramatic event, allowed us to farm and afforded us the leisure time to pursue art, science and make the big discoveries on which modern civilization is based on.
You can now use YC's Startup School directory to find a cofounder
The opposite likely occurred re: local businesses. People stayed home in Renton and spent money locally instead of spending it in Seattle.
> what superior and general logic should have been applied that would have avoided the cold war?

The logic that the entire population is stuck on this planet (then and now for the time being), and the resources/ideologies being fought over don't mean a thing if everyone is dead.
Why Responsible AI Development Needs Cooperation on Safety
> It's not a substitute for interacting with teachers.

Why not? Teachers can still do what they do best, which is answer questions and clarify things. You don't need a teacher to actually teach a lesson de novo each time. I don't see what's wrong with recording a (very good) lesson and just reusing that and having the actual teacher in the room answer ad-hoc questions.

I actually see this teaching model as potentially amazingly transformative for students in what would otherwise be bad schools. Rather than being held back by disruptive classmates, teachers having to teach to the lowest common denominator, etc. it could give students the ability to learn at their own pace and advance asymmetrically compared to their fellow students, even without funding for gifted programs. Basically it can be a more formalized montessori model.
Google puts Chrome on a cookie diet, which just so happens to starve its rivals
really? I always thought that a lot of the low cost domestic airlines in the US managed costs by maintaining a fleet of a single type of plane. Southwest Airlines for example is entirely Boeing 737 (according to wikipedia, 513 737-700, 207 737-800, and 34 737 MAX 8--presumable grounded.)
Add to your summer vacation itinerary: interact with a robot
Did they die pretty early on? Do you use USB port on a hub/PC/etc for power?

If answers to both of those questions are YES, over the years in reading forums/comments/etc a common thread between them has been that rPi kills microSD cards, and the commonality between most of those posts has been the use of (low/unstable) power strictly off of a USB port of another device (instead of a wall adapter)

Edit: I now see that geerlingguy addresses this elsewhere in the thread too, so he can add at least some anecedotal experience that drawing too much power from a poorly-powered rPi is a recipe for failed SD cards

(Sorry if this is completely irrelevant- it may just be that if you write to your cards a lot they're dying from that due to endurance, like you said)
It's called Enhanced Weathering of Minerals.

They mention olivine in its description page:

https://www.drawdown.org/solutions/coming-attractions/enhanc...

They don't try to quantify the potential, though.
If AlphaStar is playing at the top of the ladder it probably won't be too hard to figure out that it's AlphaStar. There's only around 15 or so players with MMR above 6000, and they tend to know who they've been matched up against, even if the opponent hides their name with a barcode (they name themselves "IIIIIIIIIIII" so you can't recognize who it is. And AlphaStar has a pretty distinct play style too.

Unless it's playing more towards the middle of the ladder where there's lots of players I don't think the test would be very anonymous. Regardless, I'm pretty excited to see what happens. Hoping to luck into a game.
Rewriting stable software in Rust is a very bad idea. Especially in open source, where we don't have enough maintainers, it ends up hurting the ecosystem. A certain prominent GNOME maintainer has been trying this recently and breaking things along the way:

https://gitlab.gnome.org/GNOME/librsvg/issues/456

Apparently, GObject Introspection doesn't even work in Rust, yet it is expected to be a perfectly valid replacement:

https://github.com/gtk-rs/gir-files/issues/35

Please don't be like these people! Keep the stable software we have, and maybe write new software in Rust.
The problem with the AI is that it is mechanically perfect with perfect accuracy every time. The AI never misclicks, even when under pressure.
So you have faith that the government operates within the confines of the laws that it makes for itself, and faith that google is not sharing its data with government agencies or that google has not been infiltrated by government assets, and you have faith that google strips the PII from your data, and faith that when you tell google you want to opt out that they opt you out, and faith that when you want to delete something, google deletes it for you. If everyone simply plays by the rules, then there's nothing to worry about.
How can the funds be transferred if I still have the private key? Again, the question is who controls the keys? How can I still have my keys but the smart contract can transfer the "account" to a claimant that may or may not be me?
Is my take on this also generally correct? That it wouldn't have been a problem had cookies and such been designed to take into account the origin properly (and hence why it's unintuitive and catches people off-guard)?
U.S. Said to Investigate French Plan for Tax on Tech Giants
> one study showed improved shot group tightness

I refrained from mentioning caffeine's other reported and studied benefits, as my understanding is they mostly disappear when alertness is compensated for. Shot group tightness, memory performance, response time, critical thinking and many other performance criteria have studies indicating that caffeine improves results, but it's hard to separate the performance enhancement of just being more alert. Maybe people shoot more accurately or memorize cards better with caffeine, or maybe they just weren't quite paying attention when not using caffeine.
Agent Smith Malware Infects 25M Android Phones to Push Rogue Ads
From the article:

>Q. How does AlphaStar perceive the game?

>A. Like human players, AlphaStar perceives the game using a camera-like view. This means that AlphaStar doesn’t receive information about its opponent unless it is within the camera’s field of view, and it can only move units to locations within its view. All limits on AlphaStar’s performance were designed in consultation with pro players.
They could instead deposit it into their own bank, i.e. full reserve, and let the bank do the investing/recirculation itself which it is accredited to do.
Looking forward to AlphaStar learning to spam bad manner chat commands to unnerv the other player
No there are strict tier 1 and tier 2 capital ratios that banks are required to uphold.
Yes, because issuing the request was already allowed despite the same-origin policy. For example, you can do GET requests with iframes, images or redirects, and POST requests with HTTP forms.

The important part is that CORS can be used to relax any existing same-origin restrictions on HTTP requests.

1. If the same-origin policy isn't a problem for you, no need to change anything, obviously.

2. If you want to _tighten_ the same-origin policy, CORS isn't going to help you (as far as I know).

3. You can get rid of any request-related same-origin policy restriction with CORS, easily and in a way that is easy to secure. There is no need to build around it.

4. If you try to use something custom to achieve that instead, you're likely making a dumb mistake, because you're not only creating unnecessary work, but also most likely either breaking many more users than there are users that don't support CORS, or introducing a gaping security hole, or both. Usually both.
I operate a larger instagram account (125k followers), and while I would rather die than apply the word "influencer" to it, I can confirm that it's very unlikely that this has to do with the content of the feeds. We have extremely regular content: 2 posts per day of artworks currently on view around the world. Sometimes we add thousands of followers a week, and our posts rack up tons of likes. Sometimes it takes weeks to add a thousand followers. There's no change in the number of people mentioning us, no outside source for the influxes. It really feels like we hit some threshold in the algorithm and then everything changes for a while. We've been pinned at 125k for a few weeks now after a period of fast growth. Nothing about our content or our natural audience has changed.
https://crowtherlab.pageflow.io/cities-of-the-future-visuali...

That page is the link to the interactive site.
A digital key is not the equivalent of "new in box merchandise". A digital key is a technical means by which to add a purchased item to your digital library. The ideal behavior is to not have a key at all but rather, once you purchase the item, to just have be added to your library automatically. That's the model that digital purchases are working towards.

Physical merchandise exists before you purchase it. It costs money to produce, any unsold units are a negative for the company, there's a high overhead to buying a physical item in e.g. China and bringing it to the U.S., it's difficult for individuals to deal with large bulk amounts of physical items, and actually selling the items also involves physically transporting it to the buyer. All of this means it's rather difficult to do something like buy 1000 physical copies of a game in China for cheap and resell them to buyers in the U.S., or even to just buy 1000 physical copies of a game using stolen credit cards and then resell them.

Digital keys on the other hand are ephemeral, they don't exist until you buy the product and they stop existing the moment you redeem it. The key is just to facilitate the process of going from purchase to having the game in your library. In some cases the keys are indeed separate entities you're allowed to resell (I'm thinking like you kickstart a game at a tier that gets you multiple digital copies, so they just send you several keys you can do whatever you want with), but that's not really the standard model. And yes, if you buy a game from a store and they give you a key, normally you are allowed to resell it, but there's usually limitations, such as games bought in China are supposed to be redeemed in China. And there are plenty of key sources, such as bundles, where you're not allowed to resell it at all, there's just no technical means of enforcing this (largely because services like Steam have no incentive to provide a technical means of limiting this; Steam doesn't care where you got the key, just that you put it in your library and thus increase usage of Steam).
Forrests hold carbon permanently.
Who here would fly on a Max 8? If not, why should Saudi buy them?
If you register now for Startup School 2019, you can now start using the directory to find other single founders looking for a cofounder. Filter by proximity, vertical and company description. This is a really great free resource to help you do the single best thing to help your startup.

Over 11K founders have already signed up for Startup School. Classes start July 22nd. https://startupschool.org
New ransomware is targeting network attached storage devices
I guess the thing people are interested in is a program that can autonomously play the intelligent parts of the game - the strategy and all that. I assume Starcraft is a poor choice for that, though, because of the massive importance of micro.

For instance, imagine you’re playing a chess game with a 100 ms timer and first to exhaust their timer loses. No human will win and I could create a program that could best Kasparov trivially by advancing each pawn. There’s the game and then the input layer problem.

Maybe Civilization IV ;)
Do you not think that science is filled with similar myth making based on scientific facts?... which are then quickly revised when new information which contradicts those facts is discovered.
Soon rPi4 will support directly booting from USB3.0 - a USB flash drive (or preferably, SSD) would be a good middle-ground instead of waiting for m.2
Defaulting to caution and conservatism in local government doesn't sound entirely bad. It's too easy to bring the power and authority of government down with unintended consequences on disadvantaged people. Think abuse of eminent domain or similar.

However, I don't think this argument applies to cars, which are not people.
CORS is what allows your-bank.com to tell the browser that it can allow such requests (presumably because it is safe to do so).
It costs about $1 to transport an oil barrel 1000 miles.

35 billion oil barrels are transported each year.

So transporting that olivine rock will cost an order of $250B.

This will compensate for the yearly co2 emissions , ~38B tons.

With carbon offsets priced at $15-$40 per ton - so there's potential for profitability .
Realistically, Dynamic Allow-Origin is the only way when you want to add more than a few allowed Origins. You wouldn't want to send back a 10kb header detailing all the clients of your service, would you?
lsof -i

Works on GNU/Linux and should also work on macOS.
Cool walls are cool for the environment
12 miles is totally doable. An e-bike can help make it more doable if it's not already doable for you.
Bypassing Web Application Firewalls with HTTP Parameter Pollution
> "Restricting the bot to one screen of information at a time is great"

I'm actually curious on the details of this, because it makes for a huge difference. The pro players spend most of their time looking at the mini-map, which shows you what's happening all over the map, in areas where your units/buildings have field-of-vision. You can't see exact units/buildings on the mini-map, but you can make out unit movements as well as expansions. Not giving AlphaStar access to the mini-map would be a severe handicap.
Just how connected to the royal family is "Flyadeal"? This doesn't look like a very large airline, it's a smaller low-cost one, and this order was for only 30 planes. The article even says one big reason they were able to make this move is because of the small size of the order.
Unsupervised learning is even more black-boxy than supervised learning in terms of explainability.
Setup recurring donations as soon as you get around to it. It's a lot more money, and a lot easier to plan your budget since attrition is perfectly predictable.
>won't allow any of these things in my house period because they will always use them for things behind the scenes that they won't state.

As OP stated, "this extends beyond home speakers to any voice-enabled device in general".

Unless you're living like the Unibomber, it's not a matter of "just don't give it to them". The moment you step outside your house and socialize with almost anyone anywhere, it's liable to being taken from you.
I mean, that's obviously a "gross generalization".
Well, they must be influencing some people, since companies have seen returns for their efforts in that space. Despite the viral stories of how 'X influencer sold only 30-40 products despite having hundreds of thousands of followers', there are quite a few more examples of it working out:

https://www.marketingweek.com/roi-look-like-world-influencer...

https://digitalmarketinginstitute.com/en-gb/blog/20-influenc...

That said, I do kind of wonder about some of this myself. What percentage of an influencer's fans would already be planning to buy the product regardless of said influencer's marketing efforts?

I mean, your average gaming/TV show/music focused social media account/channel is already likely targeting people with an interest in those areas. And the more niche ones likely only appeal to the people who already bought said products anyway. The average Ceave Gaming viewer already probably owns Super Mario Maker 1 and 2, and the average TWD98 viewer is probably an avid Mario Kart fan. Wonder how many other influencers and successful channel owners have fanbases made up of existing customers/people who've already made up their mind on a product/service?
It comes down to what you are interested in. Right now DeepMind seems to be focused on beating humans on strategy and tactics, which is reasonable, since those are the contested areas and cpu winning on APM and TTFA has been solved for long ago. To not confuse one for the other, putting limits on the later (at some point maybe even stifling itself beyond what a pro player could reasonable to) seems like an excellent way to go about it.
Really? Or was it about the recent sales to UAE?
I'm only selling the IP rights for $0, so yes, you may.
Fast and simple Bitcoin exchange bot on Telegram
> "Feels like RTS games have not fully exploited the potential of multi-monitor setup."

Depending on how that's implemented, I could see that rapidly becoming de facto "pay to win".
In my area you'd be in violation of local parking ordinances after the second step. Trailers, or vehicles with trailers, are only allowed to park alongside the road for a few hours at a time.
>Natural selection is a constant force, presumably new genetic codes could offer an advantage, e.g., robustness against damaging mutation, resulting in multiple competing genetic codes.

But what would the advantage look like? Isn't successfully surviving and propagating for billions of years, the ultimate advantage? It would seem like our current state is the best one then..
I don't think that answers the question. As it can just mean the AI has to move a camera-like view (sic) but still doesn't have to use computer vision to get which unit is which, health bars, and things in the like.
It's like the modern equivalent of Tupperware parties.
I’m not familiar with Amazon’t affiliate program, but it’s my understanding that these don’t typically take money from the author, their commission coming from the platform’s cut instead.

Given that, and seeing as the blog post author was upfront about it, I don’t see a problem with it unless the book’s author objects. Affiliate links don’t even steal credit — they give an author’s work more visibility to people who might be interested in it without cutting into their revenue. A commission is an incentive to share work you enjoy.
Multiple blogs I read sell RSS sponsorships, and given that RSS feeds are, you know, ultimately web pages, analytics are relatively trivial.
The single-value constraint seems like a feature rather than a bug; if you included your full list of whitelisted domains every time, not only would your HTTP header size be unnecessarily heavy, but you'd be leaking private details about who else is using your service. This isn't an inherent problem, but it could give an attacker some ideas of who to target.
I sure don't want to fly on one, and any company that buys Airbus planes instead of Boeing planes is more likely to get my business. As the article shows, numerous polls show I'm not alone in this sentiment.
I kind of agree with you on that. People don't seem to have much sympathy about multiple subscriptions services. The mantra is to cancel subscriptions to whatever you're not watching ATM, but with young children that's untenable (I'd prefer to just outright buy, but discoverability and availability doesn't always work like that).

It does suck when Comcast is fighting with ESPN and you don't care because your kid just wants to watch the Disney channel.
Is the problem with open parking stealing bikes, stealing parts or breaking bikes?

The obvious safety strategy is to have a bike of lesser value with better locks than what's available nearby. But I also ponder what it would be like to own a really valuable bike. Do people steal handlebars or something, because that would make sense to me? Or is vandalism the bigger issue?
Supreme Commander allowed you a minimal view on your alternative monitor. It was neat but I felt it wasn’t particularly awesome or anything.
The idea is to see if the bot is playing as smart as a human. To measure this, you must factor out any advantages not available to humans. This is valuable feedback when developing an intelligent agent, but that doesn't mean you can't remove those artificial handicaps once going to production with something like self-driving cars.

Edit:

Alphastar does already factor out reaction time:

“We measured how quickly it reacts to things,” Silver said. “If you measure the time between when AlphaStar perceives the game. From when it observes what’s going on, then has to process it, and then communicate what it chooses back to the game. That time is actually closer to 350ms. That’s on the slow side of human players.” https://venturebeat.com/2019/01/24/alphastar-deepmind-beats-...
Nope. Because other methods never transmit a password in cleartext. (And they especially don't transmit it with every single request)
Woz ur the man.
China Mass Breeding Lions, Tigers for ‘Traditional Medicine’ Organ Harvesting
I'd rather see Boeing go out of business at this point; they've proven they can't be trusted. What we need is more competition from other manufacturers, such as Mitsubishi in Japan. If Boeing goes under, some other, more trustworthy company could buy up their assets and start building better-engineered planes.
Electric train/plane hybrid is the best of both worlds
Ask HN: What are your favorite Podcasts?
Tech, news, anything really! Need to fill some time while commuting.
I think your points of targetting large regional chains and not-Starbucks national chains are great. I think you may achieve more impactful market acquisition there.

> resigning themselves to the fact that a chain exists is a surefire way to go out of business

Saying this to a local coffeeshop is a surefire way to get them to not only not listen to you, but to tell all their friends about how much you suck. This is absolutely wrong. This may work in selling to someone struggling, but the very fact that any other solidly-in-business coffeeshop exists proves your argument quite obviously incorrect.