skysight-inc/HackerNews huggingface dataset:
CORS allows websites to specify which resources (other than their "same origin") can access their information. A simple is how jquery allows any website to access jquery scripts from their CDN.

CORS also works on the local network, or even localhost, as the author has discovered for himself here. Uses in these spaces are less ubiquitous, but if you have ever needed to set up a web enabled resource in these spaces, you may need CORS. I'll give some theoretical uses here:

1. A company sells routers. They host a webpage at company.com that makes requests to your router at <scary ip>

2. A company sells a big, expensive hardware component that attaches to your computer. To manage this component, they set up a website at company.com, and the component sets up a website on your computer. Company.com makes requests to localhost, to manage that big, expensive component.

The actual issue here is that companies setting up these websites at localhost and in your local network do not securely set up CORS (see Zoom, other issues). Although it would be unreasonable to kill these use cases, it would be reasonable to require the user of the browser to check off that a localhost or local network request is okay.
maybe, without the brackets, of course.
> I think they only have 100

No, that is wrong. AWS has millions.

> IPs are expensive. It would probably cost thousands of dollars

Not if you rent them for 10 minutes each, not.
> If you don't participate you're seen as "not a team player"

In other words, it turns what should be a recreational activity into a job requirement? While I haven't experienced that myself (but then, I don't work in SV), if I did, it would make me actively angry to have a job requirement that did nothing but take away from accomplishing what I was hired to accomplish.
Lodash prior to 4.7.11 found vulnerable to DoS
> As they say, silence is deafening. So are awkward doctor’s office calls taken in cubicles.

If anyone here thinks that either cubicles, or an open office are an appropriate place to discuss your medical history with your doctor...

I think that, like in high school, their cellphone privileges should be taken away.
> Maybe they went a little overboard with the wording but it's not like Congress invented hacking.

Believe it or not but CFAA would likely have not come about if not for the classic film "WarGames" [1].

[1] https://books.google.com/books?id=7rBLCZuEOswC&pg=PA38&lpg=P...
Is it much different than the laws of the sea? Sometimes laws spur innovation. If the law is: first one to establish a base owns it then there will be a lot of effort put into establishing a base.
Tamper monkey is also available for Firefox, which doesn't allow unsafe-eval ..

[edit]: just checked, tamper monkey on chrome has the following policy:

"content_security_policy": "script-src 'self' https://ssl.google-analytics.com; object-src 'self'"
I don't think TLA+ is "the real thing." I just find it easier. If others find PlusCal easier, then they should definitely start with that.
I'd love to hear an opinion on someone like Ken Silverman or Tim Sweeney, as they were Carmacks contemporaries.

There's probably legendary but unknown programmers at place like EA or Sony.
> Stack Overflow doesn't care about helping users get answers to their questions; they care about creating a Google-indexed repository of high-quality questions and answers.

I'll add that experienced Stack Overflow users don't care about helping other users. They care about badges and reputation, which is a proxy for helping users but not quite the same.

So to me it's more like a wiki with a pseudo-Q&A gimmick with a LinkedIn-meets-github-repository-activity-bragging aspect to it, which is particularly inviting to people who like taking down others and feeling intellectually superior, even if that means telling someone that their question is stupid – which means breaking a rule that is essentially the cornerstone of any other Q&A setting.
A moonlit tribute to a moon landing icon
>The more I read about it, I’m convinced “loneliness” is an upper middle class problem.

Yeah, exactly. You trade a social life for financial stability accompanied by loneliness. I've had one or the other, but not yet been able to find a balance. It's, very, very hard to do except for the few among us who have a highly desired technical skills (check) and excellent marketing skills (uh, nope). Those folks can run successful freelance/consulting businesses, work reasonable hours, and still make good money.
> The Bible did not invent "being nice to other people"

Yes, it kinda did, at least in Europe. But honestly, as someone coming from a Christian family from India, and seeing that christianity in India plays an outsized role (as in Indian Christians, not foreigners) in social services despite its status as a minority religion, I think it's safe to say that Christianity is uniquely into helping others. A few of our relatives were even jailed for 'marxism' for daring to think the poor ought to be treated with dignity.
it would not be that profitable anyway after factoring server costs. say you hack into one celeb account. Instagram would immediately recognize the problem and fix it. but until they fix it, maybe you could make a few hundred dollars promoting some crpyto thing. Who knows. .s Instagram does not allow live links and suppresses posts that look like ads, so instead of being seen by millions of followers is only seen by thousands.
im In the same position a lot of the time when meeting new people. It’s not because I feel superior, I just lack interest and any knowledge of sports and cars and most topics that a lot of other people use for small talk.

Now, if they want to talk about that time their fighter gutted an orc with an awesome double crit, I’m all ears, but Cowboys losing to some other team in sportsball, not so much.
Another: The general public cares about privacy but not more than they care about the perception of belonging and being a part of any sensation that has to do with social media.
It was only a short while and I am back to regular. But now I hate eating only meat/vegetables. So I incorporated exercise with more whole grains. Trying a more balanced approach.
that's laser, or silphium

https://en.wikipedia.org/wiki/Silphium
This anti-scraping tech is getting a little ridiculous, and will only end in accessibility issues (while still not actually preventing or even slowing down scraping).
Yes, that's what I'm referring to -> 'programmer machismo' sucks
It would be nice to read the article in question, but once again, it's behind a paywall.

In what way is a thread here different than an extension of the comment section in a paid publication if you have to have paid to get to the article?

It would be pretty easy to make it a condition of being posted on HN that a referenced article is NOT behind any kind of paywall. The biggest culprits that come to mind are the NYT, The WSJ, and The Economist. How about either not making these paid articles the subject of discussion here or finding an alternative source without the wall?
You could do that exact same thing without FaceApp data though.
17,000 visitors, 20 sales – The failed non-validated startup
I was a former mechanical maintenance tech for an auto manufacturer, so this story feels familiar to connecting a CNC lathe, or a multi-axis mill, but reading this guys ham-fisted accounts made me pretty livid..

>The datacenter staff, not needing a forklift in their day-to-day, had managed to solicit the services of a forklift, the associated operator, and some very handy folks to help navigate the mainframe from the storage space to its final location.

Since this thing can approach the cost of a rolls-royce,and weighs half as much as a prius, movers and millwrights should have been called in. watching two chubby guys in tennis shoes and no gloves move a 700 kilo server in reverse would have given me a heart attack.

> The various guides did hint towards how the phases are connected to various Bulk Power Regulators (BPR) but nothing was very definite.

that should have been your clue to hire an electrician. there is no such thing as a bulk power regulator. this is a BUCK POWER REGULATOR.

>I tried to do my best to construct a power cable

Make sure you tell your building supervisor and the fire brigade you "tried your best." there is no "tried your best" section in the electrical code. You either construct a cable to spec, or not.

>Now, I assumed that given there is no neutral it has to be a delta system

Since youre handling voltages that can kill you, perhaps a meter?

>The uncertainty was which phase-pair powered the lowest BPR? I guessed A-B

OR your BPR explodes, your HV breaker trips, and you wipe out power for half the building. Christ on his throne.
Boom, how many people are in space?
The author missed another option to resolve the dependency issue — to run the root dependency (and its transitive dependencies) in its own classpath.
I find it incredibly ironic that it took me about 30 seconds to go to the author's profile, see him plaster all the social media platforms we can reach him on. Went to his Instagram and could tell where he lives, where's staying at when he travels, that he enjoys walks with his mom in Centennial beach in Delta, BC and what he does for hobbies.

All this in under a minute and yet here we are panicking over a Russian Company that can do whatever it wants with your face pictures.

Ok.
Firefox is especially good about keeping previously filled in form fields around for a bit, so once you fixed the SSL issue there's a good chance that you could retrieve your form post.
>> based on what criteria?

Well for one, the fact that they don't nest properly. They mention that you can get the address of the parent hexagon by truncating that of the current one. The problem is that doesn't actually work all the way up because certain tiles on the border will flip back and forth in strange ways. They had to do something to deal with this, just like the would have had to do something else with squares having two kinds ot neighbors. The squares issues are more obvious though and the code to deal with it will probably be very localized.

I mean, don't make a nested spatial index with spacial regions that don't actually nest. The structure fails at its primary claim.
Tell HN: Docker Hub Is Down
There is a partial service disruption affecting Docker Hub Web and Docker Hub Registry (pull and push).

https://status.docker.com/
NASA's catalogue of manmade material on the moon [pdf]
The word "food" occurs only 2 times in the body of the executive summary. So I think it's a stretch to use "can't afford" as the main title of the article.

The full report doesn't have much to support it, it never shows us what food cost, how they're unable to afford it. At best it talks about "availability" of healthy food as if the supermarkets doesn't sell it.

The report never considers that the unhealthy food might be a taste preference just like smoking even though everybody knows it's very unhealthy and very expensive. Giving up smoking isn't expensive, it's not money that stops people from quitting smoking.

Low-income groups are more likely to consume fat spreads, non-diet soft drinks, meat dishes, pizzas, processed meats, whole milk and table sugar than the better-off (pg 133)

My personal observation from observing shoppers in a number of supermarkets: poor people buys quite a lot more soft drinks than the well educated.

The health of the poor is not improved much by giving them (free) fresh produce when they drink a couple of liters of non-diet Coca Cola every day. They end up obese or with diabetes which are the mother of all ills. An ounce of broccoli can't cure 2L of Coca Cola.

I think the single most effective policy would be to ban sugar in drinks and severely restrict its use in fast food (and bread). The fat-free policies must be reverted to avoid foods using sugar as replacement for fat.
Would the raw materials be harvested in space and refined up there too?

Otherwise sending all those raw materials up ... seems like it would be a pretty big cost.
What an utterly infuriating article to read: as you scroll down Forbes drops a giant floating video… on top of the text you're trying to read and it follows you as you scroll.
I'm not the person making the original argument but I agree that they have a point.

Someone creates a list of "famous programmers" which only includes whites males. This just further cements the image of programmers being white males, when in reality the field is more diverse and when it isn't people are trying to make it a bit more diverse through various angles (mentoring, removing biases from hiring, etc).

I'm not blaming the person writing the blog post but the comment pointing that out has a valid point and something to keep in mind and develop some sensitivity for to create a more inclusive environment for everyone involved.

> I did not waste a single thought about it and wouldn't have even if there were some or many in it.

That is called privilege and means you are not affected by it and you just don't see the problem. Which is a very understandable behavior and I'm not blaming you for it. But maybe in the future if you, me or someone other white male is in a position to find sources to quote, or create a list like that we could keep that in mind and look outside of the bubble we are living in here on HN and see if there's something that we missed before.
Doesn't that support the original comment? Given increasing income inequality, wage stagnation, and the "desirable" jobs being clustered amongst the upper-middle and upper classes, and your suggestion that the loneliness epidemic is concentrated to said groups, then it would seem to imply that it is increasingly a binary choice between career prospects and living near family/friends.
Low bounties like that are going to motivate hackers to sell to malicious actors instead of going through the proper channels.

Facebook should know better.
I never said generic data was the sole item that acheived them their victories. I claimed data was helpful and lead to victories and then clarified data helpful in targeting certain individuals. You claim there is no evidence that data was useful and go so far as to say Trump didn't even have a real voter database. Even though running as a republican he had access to the RNCs and Cambridge Analytica did indeed provide support.

Targeted advertising can and does work. Google has shown this with an experiment called the redirect method in which they used ads to target and deradicalized potential isis members. Another individual used the same method to target suicidal individuals and was able to run a campaign to get them to call a hotline. He had I believe a 38% conversion rate where as a standard ad conversion rate is around 2% to 4%. Again this is in the public domain.

Data, targeted or otherwise, is like any other tool. It is not going to be some magical device that gives victory. In the end you have to use it wisely and correctly infer a pattern that can be exploited. Any relevant information is better than having no information. And based on the many papers and efforts to use data to influence the population there is more than enough evidence to suggest such data gives you an edge. It may no be a large margin but it could be enough to make a difference.

If we consider amazon for example, they don't need 40% conversion rate. If they can just gain even a 1% extra conversion rate, that represents 100s of millions of extra revenue. Especially at scale, data is indeed useful.
I am not at all saying that it's anti-social of you to think that way. I agree with you 100%. But what matters here is this: The people who make the hiring decision are likely to be the same people who decided to have an open office, or, at least, are closer to the people who made that decision than they are to you.

Now there are two possibilities. (a) Either they themselves are actually believers in the open plan office kumbaya social happy togetherness crap, in which case they will think you antisocial for not wanting to be part of that. (b) Or, they are fully aware that the company just wanted to save some money on not having walls and the kumbaya social happy togetherness is just the way that they are whitewashing that decision to make it seem desireable to still work there. In that latter case: You not drinking the kool aid will be a red flag to them, making them have doubts about whether they will be able to adequately keep you under control or whether you will turn out to be an unstable element with a mind of its own. They don't need to resolve those doubts. They just need to have them, in order to make them not want to hire you. -- In either case, it's a dangerous game for you to play.
generic roombas, tangos
Age of Amnesia
A lot of people (both programmers and not) enjoyed taking the language identification quiz [1] we created a couple years ago, so we thought it was about time we made something similar. These quizzes aren't intended to be a measure of technical ability, they're just for fun. I'm the author of this quiz and would love to hear any feedback you've got!

[1] https://quiz.triplebyte.com/language-identification/
Yes, exactly. Starbucks doesn't serve coffee as much as warm (or cold) milkshakes. And with items like the Mocha Cookie Crumble Frappuccino they aren't even pretending anymore.
I found that I can't wear headphones of any sort in an open office environment. It puts me on edge and I'm always checking to see if someone has come up behind me or is trying to get my attention.

It's a nice idea in theory (and it clearly works for a lot of people), but for me it just makes the situation even worse.
he said he pays that monthly. unfortunatly all electricity provider have a base price. also 0.30eur/kWh is the lower bracket in west germany (not the average).
and for more than 1 person 1400 kWh also seems a little bit off, too. Ok granted maybe he is roughly at 1800, but 1400 is like having a fridge+washing machine (every 3 days)+cooking (every second day)+led lamps for like 4 hour per evening.
I admire steps taken to improve the privacy of ad-supported media ecosystems, so this effort by WaPo should be applauded on it's own. Their results, taken along with NYT's switch back to content-only ads in the EU [1] might help spread the word that all the creepy ad-tech isn't even necessary or beneficial!

That said, I'd like to make a simple request of media outlets... Please build a rate plan which provides all of the benefits of subscription, adds the expected profit from advertising, and then let me buy it to experience your content ad- and tracking-free. Please!

[1] https://digiday.com/media/gumgumtest-new-york-times-gdpr-cut...
The word you're looking for is "intrusive".
Thanks for posting!

While this might be common knowledge on this forum (is it?!), many users are unaware that even having 2FA does not protect them against credential theft via phishing. Such attacks are growing rapidly given recent exploit kits for OTP-based 2FA that are publicly available on Github (https://github.com/drk1wi/Modlishka).

PhishAR prevents such attacks by requiring that the visited domain and SSL are first checked by the user's app and only then revealing the OTP.

Any feedback would be very helpful. We are aiming at enterprise users where getting everyone to use FIDO U2F might be harder to achieve, but 2FA is mandatory (e.g. due to GDPR).

What do you think? Let us know if you would be happy testing the app once we get it a bit more polished.
I agree. Handling errors is difficult and that is what it is. Many times errors can be handled properly in the function and "if" helps you think about it. Programmers shouldn't be lazy to handle errors, just forwarding them to the caller. That way it may end up like Java, where many functions throw something but lots of programmers don't care so programs simply crash with a long, confusing, unhandled exception stacktrace. How many ppl handle I/O errors in Python for example? Since I started using Go, my software is much more stable.
I'm not a millennial, but you can have my coffee when you pry it from my cold, dead hands. And anybody who has an issue with my coffee consumption is (not so) politely invited to go fuck yourself. Your "coffee shaming" means nothing to me.
In any case: The right way to negotiate for an office is not when you're initially hired, but when you've been there a while, have somehow come into possession of a fair amount of bargaining power against them, and are renegotiating your deal.
> I'll bet the engineering process of the software written for the Apollo 11 lunar lander was much closer to the bridge building process than you might think.

Of course, but the Apollo 11 lunar lander was created without the aid of ubiquitous desktop computers. I imagine the SpaceX guidance/control software was written in a way that less resembles bridge-building/Apollo 11 lunar landers and more like the organic processes we see elsewhere in the software industry.

If Neo were to build a bridge in the Matrix, chances are his processes would bear little resemblance to those of the Army Corp of Engineers.
Refinement calculus is what it's formally referred to as. As pr0n has mentioned you start with a high-level, abstract model. You then create a second model that implies every invariant of the first while adding more detail. You proceed like this to get closer to the implementation. If you are satisfied they are one and the same you can stop.

However the goal isn't often to verify every single line of code. That would be prohibitively time consuming and expensive. The ideal use for this stuff is to verify the hard parts that are critical to get right. Verifying that a critical section of code will not lead to a deadlock or resource contention might be really important and so you could start with verifying that particular system.
You gotta be fucking kidding me. For the duration of the 20th century, Drunk driving alone probably claimed more lives than all of the diabetes in the same time frame. Add all other accidental drunken errors for all areas of human activity. And then fetal alcohol syndrome. And then all the actual direct physiological health effects suffered by the imbibing individual.

This is not even a contest. You are out of your depth.
Agree - 99% of what I do is read tweets, but now they take up only ~33% of my screen's real estate, and are outweighed visually by large distracting content on either side.
Using a points system is a great way to get users addicted to that dopamine rush when using your app, though.
The real vulnerability is that Amazon makes it very cheap to make a botnet almost instantly
there's also the opportunity cost of never being able to have that $100 invested and growing compoundly until you sell/die, which is an absolutely colossal loss

as einstein or someone else said, compound interest is "the most powerful force in the universe."
You may be surprised that this also applies to math.

High-level math values logical and linguistic skills.
This is often a hard stopping point for many students who were good at high school computation like calculus.
Let's send a copy of The Moon is a Harsh Mistress to members of legislative bodies contemplating space legislation ;-)
The status page was updated within a minute or 2 of me (and others who posted on Twitter) noticing this.

Outages are unfortunate, but it's good that Docker is being proactive about communicating it.
Not sure how much food costs in the UK but that would cost $2-4 in the US if you satisfy that with canned sardines/tuna/salmon, or farmed tilapia.

Vegetables are cheaper than most people think. I usually buy $1/lb frozen peas and $1.5/lb frozen broccoli. Washed and cut fresh carrots are also about $1.5/lb. Spinach and kale are not bad either. Just don't waste money on fresh vegetables, by the time you cook them they will probably be in worse condition than the frozen stuff.

Fruits are probably the most expensive. The cheapest fruits don't even have great nutritional profiles other than fiber and maybe vitamin C (which not a lot of people know is actually abundant in many common vegetables).