skysight-inc/HackerNews huggingface dataset:
I have seen completely the opposite in the wild. In fact I've only seen it so far in the opposite direction (Java consuming far more memory than Python) that I have to ask what on Earth you are doing with Python to have found yourself in such a position.

(I've never successfully used Node so I have no idea what that's like in memory use.)
Particle systems [1].

AR. VR [2][3][4][5].

Image processing, neural nets.

But not in programming languages like C, Java or Linux.

Only in massively parallel message passing languages[4].

I suggest a Smalltalk message passing scalable cluster VM like the RoarVM [6][7][]8].

[1] Shadama 3D. Yoshiki Oshima. https://www.youtube.com/watch?v=rka3w90Odo8

[2] OpenCobalt Alpha. https://www.youtube.com/watch?v=1s9ldlqhVkM&t=13s

[4] OpenCroquet Alan Kay Turing lecture. https://www.youtube.com/watch?v=aXC19T5sJ1U?t=3581

[5] OpenCroquet Alan Kay et al. https://www.youtube.com/watch?v=XZO7av2ZFB8

[6] RoarVM paper. David Ungar et al. https://stefan-marr.de/renaissance/ungar-adams-2009-hosting-...

[7] RoarVM Demo. https://www.youtube.com/watch?v=8pmVAtk612M

[8] RoarVM Demo. https://www.youtube.com/watch?v=GeDFcC6ps88
It’s not about the situation today. Right now Netflix is paying Disney quite a bit of money to use their IP, but that really can change with time.
Mostly correct, but the browser may or may not send an OPTIONS request depending on the request type, headers, and more.

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Simpl...
Well, it doesn't matter if Cryptol is compiled down to "safe" machine code, like FaCT, right? But that's not something I've seen explicitly stated in the Cryptol docs, so I would not make that assumption myself.

Are SAW or CompCert able to do formal verification around things like ensuring no branching on secrets, ensuring that memory is cleared after use, ...? Or does Cryptol make guarantees about the machine code it generates?

I see that SAW is able to do things like prove that hand-written, optimized code is equivalent to the Cryptol specification, which is certainly very neat - but that does not preclude potential side-channel vulnerabilities in the hand-written, optimized variant. After all, much of the scariness of side-channel attacks is that they're explicitly not targeting the (highly analyzed) mathematics of a construction, but rather its implementation.
I don’t disagree.

The point I may have misunderstood is putting development effort into a SPA that only uses JS and works well with a screenreader versus the non-JS alternative that also works well with a screenreader.

Of course, it depends on where in the development process the developer becomes ‘aware’ of making the site compliant.

As you said, ‘do the right thing from the get go’.
Major Face ID security bug when accessing passwords in iOS 13 Beta 3
Ehh I've never had it die on me. It lasts like 5 hours (which is LONG for a mobile session on the switch, RIP your fingers and neck) and charges faster than my phone. I'm never somewhere for 4 straight hours without a random outlet. Yeah, you gotta carry your charger now, but it's not like the switch fits in your pocket either. Takes no noticeable weight in the backpack.
Mysterious illness that paralyzes healthy kids prompts plea from CDC
> investing the deposits is not how they plan to make money off of this.

A huge float invested very conservatively still makes a lot of money. That is how most insurance companies actually profit.
Short term US government bonds are extremely liquid and low risk; unlike other loans they are easy to convert into dollars. Presumably any other government bonds in the libra reserve (e.g. german bunds for euro?) would be selected to have the same property.
Patent issues. https://en.wikipedia.org/wiki/Time_Independent_Escape_Sequen...

Hayes themselves would even insert the sequence in press releases posted to Usenet. https://groups.google.com/forum/#!topic/comp.dcom.modems/Vr2...
Could also be faster. That is to say, variable-time calculations likely have a worst case time that is better than for the equivalent fixed-time calculations, since we just write the obvious code for the CPU using its normal instructions and optimize as usual. If we are able to box the padded time fairly tightly to the worst case, we are better off performance-wise than with the fixed-time implementations.
This is true of most news sites that report on things like this. I remember an article a few months back about the proliferation of Facebook trackers and how it is a bad thing. The article itself had a Facebook pixel tracker on it. The author could have discovered this doing the same they did for all the sites they reported on. Of course they did not cover their own site.
I don't understand your criticism. DeepMind's APM is limited, and you're saying there's still a problem because DeepMind will use its APM more effectively? Well...yeah, that's a big part of what it means to play Starcraft 2 better than your opponent, whether it's a human or a computer.

This is how APM is treated in the professional scene as well. Everyone knows that bursts of 500 APM when you're spamming at the beginning of the game aren't some incredible display of skill. But sustaining a good number of useful actions per minute is incredibly important, and a huge part of the mental process in Starcraft 2 is constantly deciding where and how to invest your actions.
Google’s new system for Drive/Photos image syncing is insane
I don't think it was disingenuous, I read it more like... "normally I wouldn't randomly plug my website, but given the context, I think this thing I built might be super useful to someone".
It was mentioned in the post:

> without simply using a centralized service like Coinbase or needing secret shares from k of n friends.
>> I wonder if there is any way I can use an image element to bypass CORS and read RSS xml that way !?

The article in question says they used the image dimensions to encode the error codes returned by the server when making a request.

I can imagine you could simply encode the payload in the dimensions of the image.
GDPR fines are up to 4% of global revenue. Do you honestly believe that Google is willing to risk literally Billions of dollars to hold on to your data? It just plain is not worth it so few people ever ask for data to be deleted it costs more to implement the data deletion code than is lost via less good ad targeting.
This Teflon you're talking about, it's a thing. Not just with CORS, not just with you.

For example, I've gotten decent at regular expressions a few times but have to keep relearning it. Adding insult to injury, I might relearn something from Stackoverflow, and realize afterwards I posted the answer!

Not for trivial stuff. But a string of punctuation with capture groups or whatever, forget about it [1].

Any support for this informal draft definition below?

------------------

Teflon tech (draft definition v0.1 [2])

Knowledge that could be learned by most with reasonable effort, but often must be relearned or is never fully grokked.

This can be due to infrequent opportunities to recall the concepts in a particular role, or insufficient need to apply (thereby practicing) the relevant techniques. It may also occur when a tech is used frequently but the foundational theory is hidden by the use of higher level abstractions.

[1] https://stackoverflow.com/questions/1381097/how-do-i-get-the...

[2] content provided under MIT license.
HahaSmart explainer video: Which products are right for my project?
Even a rooted phone will not help, since the monopolistic baseband processor will do it. The big ARM CPU is just for the users, the baseband is for control of the public masses and mass surveillance.
It was. It's APM burst of picture perfect micro in tense fights were insane.

Human player holding down a key that produces thousands APM certainly skewed this misleading chart.
Sounds like a switch to buy! My ROMS are ready.
Download Emoji Keyboard for Latest Emojis, Themes, Stickers, and GIFs
Good luck convincing anyone whose goal is to make money cheaply
Yes for devs switching to Linux is a good option.
My home laptop is a Dell XPS 13 9380 running Linux (arch). I use it for browsing, doing some light development and occasionally video/photo editing.
So far I am very happy with it except some few annoying software related issues but I can live with them:
* pulse audio does not always auto-switch to the latest connected bluetooth audio device or it does but not use the right A2DP sink. I have to switch manually.
* fractional scaling of the display under Wayland and Gnome.
* battery life is still not as good as on Windows but it is not that far.
* the fingerprint reader is not supported.

The keyboard is excellent, it is lightweight 1.2 kg. I opted for a 16Gb of Ram, 512 Gb SSD, i7 8556u, FHD model. The one with the QHD screen was 200 Euros more expensive but still 700Euros less expensive than an equivalent Macbook pro.

So far I don't see why I would change to a Macbook. Linux/Gnome are good enough for me.
Is it due to another Fiber Cut somewhere? Recently almost the entire east coast was down due to fiber damage. I guess the cloud services are as good as the wires that run in the ground.
I'd love to hear your thoughts on Rust having an in-house type system and functional programming paradigm. It doesn't seem all that different than comparable era languages like Swift (maybe through inspiration) or Haskell. Macros, are IMO, where things go a little wonky but once you learn you can actually trust the compiler it's easy to let go.
Application Programming Language
>Because who can enjoy the Congo Bongo in light of mudslides in the Pacific Northwest? Who can enjoy The Flying Gecko when you have species-wide devastation in the Amazon? The sheer insanity of a water park in the age of the Anthropecene...

This guy must be so fun at parties.
Everything You Need to Know About Solar Batteries
We were literally just about to deploy an updated pricing model when our test suite started failing when using Stripe's API.
Seems pretty clear to me? Flying is bad for the environment, spectacularly so. The alternative is not necessarily: flying without burning fuel. But rather: not flying.

And that isn't that big of a problem. We have many alternatives to flying, e.g. a high-speed rail system that has a 10x smaller impact. Of course you want to steer consumers towards that with incentives like these.

Earnings from these taxes don't just disappear in a black hole. They're redistributed. Perhaps to make train travel cheaper and more economically viable. Perhaps electric cars. Given the socioeconomic groups that most frequently use public transport vs air travel, this tax seems progressive, not regressive, if anything.

And that's only one alternative to flying: other forms of travel. Another is simply not travelling at all. There's a reason people don't choose to live 20 hours away from work, or choose to have a daily hobby in another country, or choose to visit friends across the world on a daily basis, because there's a cost to travel. A cost that is too high. And that's okay. Not all travel has to happen, not all travel is important enough to pay the cost.

May seem silly, but if we could teleport around the world for $1, with hypothetically insane costs to the environment, you'd have massive amounts of unnecessary travel. And the right response would be as a society that we could do without much of this unnecessary travel entirely, replace it with viable alternatives to proximity like a phonecall, a skype call, a text message, a picture etc. And we can do this by making it more expensive, and using that money to make low-impact alternatives (relatively) cheaper.

If you know that as a society we're destroying our environment and the current cost of doing so is too cheap, or the destruction is not factored in to the price, the most reasonable solution is to increase the cost.
1) It's fantastic you've done this. This sort of thing would make me crazy about my employer.

2) "We certainly haven’t made up for the lost day in measurable improvements or efficiencies"

Maybe that's OK? Humans have tons of stuff already (at least in the rich world), and most of the things that are expensive are going to stay that way because we create false scarcities to soak up any extra income (housing, mostly).

I suppose that's why we need controls to level the playing field, or else the company willing to push workers for another day will lower the bar for everyone.
"In decentralized systems like Bitcoin or Ethereum, when a user loses their secret key, they lose their entire
account. Existing methods of account recovery either give up decentralization or require persistence of
information by the user. Instead, this paper introduces Escrovery, a method of account recovery in trustless
systems that is decentralized, non-persistent, anonymous, and secure. Escrovery uses escrowed payments to
deter malicious recovery attempts. Any user may make an Escrovery challenge to recover any account by first
placing an amount of money in escrow. If the original account owner responds to the challenge in a certain
amount of time, they earn the escrow. Otherwise, the challenger takes ownership of the account and recovers
their escrow."

Ouch. End up in prison for wire fraud, lose all your BTC in the process cause you can't respond to the challenge. And you only figure it out years later after you got free from prison. It might be vulnerable to (other) forms of (D)DoS as well.

Let us assume the owner of the BTC deceased and took their secret key with them to the grave. Who'd be the rightful owner of the BTC? I'd say the family (who exactly and how much differs per jurisdiction!). So if you want to assure that is possible, all you need is e.g. a notary or apply shamir's secret sharing with multiple family members (arguably a poor man's notary though it has its own advantages and disadvantages e.g. a notary can conspire against you but so can family members; for a notary there's much more at stake I suppose given its their profession and credibility at stake). These solutions are less complex, and rely on your own responsibility to implement correctly. Which, to be fair, also has its pros and cons.
You're talking about brand advertising, as distinct from product advertising. It's not so much about shopping for "something" as it's about instilling an affinity, a nudge, when the choice is between your brand and something else (a competitive brand, a cheaper store brand, etc.). That is, between items that are otherwise equal(ish).
More like 10$ ? https://shop.pimoroni.com/products/fan-shim
> "Access-Control-Allow-Origin" doesn't block the request from going through, it just prevents wrong-origin Javascript from accessing the response."

On a GET request (like the one generated by a IMG tag) and all the other cases that do not require a pre-flight request ( https://www.w3.org/TR/cors/#preflight-request ) this is correct.

Are we clear on the thread model and what Zoom is trying to do? As far as I know, Zoom wants to make "joining a meeting" as easy as clicking a link. I do not think Zoom wants people to be logged in a zoom account in order to join.

And what Zoom should try to avoid is to have random people joining meetings and website forcing actions on the laptop of the people.

A simple fix is to use a GUID or any other long not-guessable string for the meeting id. And, of course, do not expose any other potentially dangerous endpoints beside the one that starts the meeting.

In general it should not be about either CORS or CSRF. There are better ways to start a video call communicating with a plugin than exposing a port on localhost and using <img src="localhost:12345/a-command?aParameter=12345" /> to communicate with it.
States That Don't Have Income Tax
APM is misleading because it can mean a lot of things. There are bots out there that will perfectly micro units to win battles that would typically trade out.

SC2 is really about attention management- every action you take, like moving a worker to construct a building that you'll have money for in the future, takes time and attention, and good players will take the minimal action needed to get something done and then move their attention elsewhere while they wait (almost like CPU pipelining). This is why players will do runbys/drop harass at the same time as a big fight. It forces the defending player to spend more attention than the attacker, or risk losing key workers/buildings. APM is just a rough representation of the ability to multitask.

From this perspective, AlphaStar's APM doesn't really matter. If it can instantly understand and juggle different scenarios occuring on the map at the same time (scouting, macro, battles, drop defense), that immediately puts it at an advantage, and many pro level strategies rely partially on pressuring the opponent until they make a mistake.

The high level strategy stuff exists on top of all this, and that's what makes SC2 so difficult. AlphaStar is really impressive, but once it understands the game at some level, I think it's inevitably going to be better than human players. Human players are going to get wins off AlphaStar by forcing tactical errors in weird scenarios, but it's not going to look like typical human games.
But with Rust you will get a whole ecosystem working. In your method you will get 0 dependencies working, no?
Not Pi, but related - I gave up on using a 64GB Kingston SDXC in a Lexar reader to play MP3s in my truck. After just a few days it would develop corruption at the end of songs and by a few weeks it was just too annoying to continue using.

I looked at some of the files and it appeared to be a bit flip type problem. Went to a dedicated usb thumbdrive (as has been in my car's glovebox for 7 years) and no issues. Really makes me question using these sdxc cards at all.
> all this forgotten Americana [...] it casually introduces to the park-goer’s mind scenes of mass genocide and global annihilation [...] Why tempt fate with a whale-watching expedition when you can scoot on over to SeaWorld? [...on and on...]

Reading the introductory paragraphs and then moving to the rest, one can understand why the author struggles with the joys of life. Overthinking, overanalyzing, and unable to empathize with the non-rich masses looking for simple, shallow fun. It then goes into politics and ivory-tower-like judgments. On the next escape the author should consider getting away from himself.
It could be anything - the voice snippet could include a query about a particular medical condition or include specific financial records for example.
Sorry, can you explain why you think counteracting 10% of emissions would have "a pretty huge impact"?

The best science from the IPCC suggests we have to cut net carbon emissions by 50% by 2030 in order to have a moderate chance of avoiding the most catastrophic effects of the climate disaster.

I'm not saying 10% isn't ambitious, but it's entirely insufficient to the scope of the problem.
There's a strong market for the door stop 2ds. Kid can throw it across the room and you will be worrying about the drywall. I bet you can use it to chuck a tire and it will be fine.
AKA "Cloud flair"
Attacks on applications of k-anonymity for password retrieval
I think that might work for certain popular brands - Dell XPSs certainly crossed my mind, as well as the Lenovo Thinkpads. Both are likely to have a vinyl equivalent available that could be used, although I'd want to thoroughly QC how the Thinkpad lid holds-up with the residue on removal.
The l4 variants don't even clear all the registers on an fast path IPC.
Cloudflare Cloud flair
Or the repair person might helpfully "clean" the case. Like what happened to this poor guy and his autographed XBOX 360 case:
https://web.archive.org/web/20080302171919/http://hawtymcblo...
Yep. [flagged] https://news.ycombinator.com/item?id=20403752
Is this an official Ycombinator project or something else?
On the 5-10 ppl mark I've have a good think as to whether own office is the right answer. At that scale I'd rather go for high end indian outsourcing.

>We have had great experiences with Indian developers(contractors) in the past

If you have 5 __named__ individuals willing to join that you trust then yeah - do it. You'll struggle to beat that ROI elsewhere. If you don't have specific individuals in mind...I'd be cautious.

My own experience with indian outsourcing is if you ask them to fetch you the moon then they'll say sure. And they'll make a legit 100% good faith attempt to do so. 10/10 for enthusiasm...but you gotta make sure they're charging at the right enemy.
What are the primary dark-web businesses?

* porn?

* child porn?

* drugs?

What else?
As in Not EAT PICtures, oKay ?
What’s all this about? Honest question
Is this true if the request is a POST? Shouldn't a POST lead to a preflight request, and then the browser refusing to send the real request?
I always hate how these things are phrased. The idea of “using a lot of memory” doesn’t exist in a vacuum. “A lot” relative to what? Do you require run-time dynamic typing features? Do you want to leverage the Python data model? If yes, then this is the memory cost of your desires.

Advice in many of the comments about other languages sounds so tone deaf. The question is not about using less memory. It’s about getting _exactly_ the feature set of Python while using less memory.
> let's agree for the sake of argument that it's still evil, and both the NYT and Google do it.

I don't think I'm willing to agree to that. What bit in the Google Privacy Policy makes you think they do it (it doesn't seem to fit in under any of the four categories of sharing)? And do you have an example of them actually doing it?

Re: location, I don't understand the distinction you're trying to make here. Under section 4 NYT says they collect "IP addresses, geolocation information, unique device identifiers". They "use and disclose this information for any purpose", which seems rather broad and "store it in log files". The retention is specified as "as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law".

(NYT then have a section on a specific app whose location information you can turn on/off, just like Google has a section on the Android location and Location History that can be turned on/off.)

Re: what does the article criticize Google for:

- Having a "sprawling 4000 word policy". NYT is the same.

- Treating the users as individuals rather than as aggregates. NYT is the same.

- Sharing data (which the article sneakily puts as the heading of a section that's not actually about sharing data). NYT is slightly worse.

- Personalized ads / ad targeting. Google basically just say they use data to personalize ads shown to you, and link to the controls for it. The NYT policy says they target ads by ZIP code or IP address, but on a re-read I agree that they don't say anything about personalization (I misread the last paragraph of 4.B, it seems to actually be about targeting ads for the NYT, not ads on NYT).

- License for uploaded content. The authors are pulling a fast one here, since that's the TOS rather than the privacy policy. The NYT TOS, of course, has almost exactly the same language.

> And that being the case, claiming that the NYT's privacy problems are "basically everything" of Google's, seems so facile as to trivialize the debate

But I didn't claim that. I said that everything the authors criticized Google's policy for was also in the NYT policy.
And fair enough, maybe it wasn't everything but more like 4.5/5.

I think there would have been a much better article here somewhere, where they'd e.g. first done a critique on the NYT policy using a similar tone as here. Shredding NYT like that would have certainly gotten the reader's attention. And once you've established a baseline and gotten the reader worked up, show how the Google/Facebook/etc policies are even worse.
So it remains sticky when removed, but I certainly wouldn't expect it to fit quite as snuggly the second time around. Interesting idea though, but my initial reaction would be no, not re-applicable.