skysight-inc/HackerNews huggingface dataset:
> Since it’s common for subdomains to host other applications that may have their own security concerns, ditching CSRF tokens for Lax cookies may not be a wise step!

This is a really fantastic point, and it applies to CORS as well.

It's common to ditch CSRF tokens when CORS is configured, which is perfectly legitimate. But reflecting the Origin in Access-Control-Allow-Origin is dangerous if you have subdomains hosted by a third party AND are using `credentials: "include"`.
Yelp to allow users to filter businesses based on staff vaccination requirements
I'm not arguing wether the vaccine keeps some people out of the hospital, I've read the article broski. The article points out what some Israeli doctors are seeing; to quote one "80-90% of my covid cases are 100% vaccinated". This vaccine is coming up short and is probably causing more harm than good in the long run; we're heading into an endemic cycle. Everyone (each company) that has worked on mRNA vaccines in the last 10 years+ are facing the same ethical dilemma, as all of the compounds have not been approved for human use. Just saying what the virologist tells me. Go nuts with your vaccine ingestion (I don't care what you do one way or the other), but I would stay with Sputnik or the Sino vaccines especially if you have a history of blood clots or genetic predisposition to heart conditions.
I am the client not the server. Maybe you are asking whether I check the CN or compare the certificates every time I connect against ones I have stored locally. I could, but for these two sites I don't. Am I worried about someone spying on the local rain radar images or wind speed data I am retrieving. No. There's nothing confidential about this information. Nor am I worried about being secretly routed to an "evil weather service impersonator" without me detecting the change. One of the adresses belongs to a government agency. These addresses do not change often, if ever.

Doesn't Lets Encrypt allow IP adddresses for the CN.
If the epoch in this proposal were changed to something closer to the present day (2000-01-01 or the UNIX epoch) the format could easily recover some bits from the time fields to put in the PRNG-generated "node" fields. I wonder why they chose the Gregorian epoch?
> With respect to LaTeX, I only started to use it semi-recently in the cloud and I'd recommend it to anyone (but only in the cloud).

$ latexmk -pdf main.tex

How hard is that? The only thing Overleaf adds here is a button and a 10x compilation time overhead.

> I don't always remember what that magic meant.

Overleaf mostly won't help you here, unless I'm mistaken.

I don't mean to be aggressive here, I just don't get the Overleaf hype. What's wrong with good old text editor + version control? I think I'll pass on the slow web app for now. At least they have Git integration so nobody is going to force me to use it.
I vividly remember Phantasmagoria. It turned out to be rather boring. Still, the novelty of full motion video was striking when I played it for the first time.
That castle guard doesn't fight for the king, they fight for the status quo.
Too add,

His first example is an applicative: parallel lines of evaluation into a result.

His second example I believe is the Either monad, if he takes ';' to be a sequencing operation.

His quad example is a monad with a syntax for defining an instance.

And so on...
Antibody responses following SARS-CoV-2 infection more potent than vaccine
I'm absolutely serious here (with the canonical HN downvotes and everything).

It's easy to imagine. Movies from (especially) the 1960s/1970s. Lost In Space. Unscoped airchecks (with fees paid of course).
Probably worse in Toronto where you could have food in your hands but die from the cold.
Florida’s Oxygen Woes Cue Coming Wave of Covid Supply Shortages
I mean that's fantastic. My immune system is also highly effective against corona viruses, fungal infections, and other pathogenic microbes. To each his own.
I'd rather practice Brahmachariya and be married
> based on the quantile their revenue falls in

Are you calculating this quantile with respect to their neighbors' revenue? The rest of the city? County? State? Country? Or the entire world? You will get a different answer for each of them.
> entirely different

Well not entirely - it's modeless, and some usual keybindings work as well (Home/End, etc.). The built-in tutorial is brief and to the point, it will get one started pretty quickly.
I think that’s a simplistic view of it. As far as I’ve followed along, Russia has been having droughts and mega fires which tend to be incompatible with high crop yields.
> Even at a Hamming Distance threshold of 0, that is, when both hashes are identical, I don’t see how Apple can avoid tons of collisions...

You'd want to look at the particular perceptual hash implementation. There is no reason to expect, without knowing the hash function, that you would end up with tons of collisions at distance 0.
> If someone finds terminal commands "obscure", I'd hate to see what their SQL looks like, in which case maybe they shouldn't be running a database server

I think you are wrong. You are gatekeeping something extremely basic like a database from 1. beginners, 2. hobbyists, 3. even professionals that might have a different background than you (sql server on windows? Back when I used to write software for windows server, while using linux on my personal laptop, the command line was all but necessary), 4. my laptop died, I have to lead a dev workshop in 3 hours and I just got a new laptop but I don't have a full blown system that sets up my dev env because I literally have to do it once every 5+ years when I get a new computer, 5. more..

And I'm saying this as somebody who would probably go for the "command line" solution in most situations.
It depends on what you need from the PC. There's a huge market of fanless mini PCs, which are taking generic laptop motherboards + CPUs (likely bulk orders of surplus from white-label ODMs) and putting them in thick aluminum enclosures. The CPU is mounted such that it directly contacts the case. For the <30W power output of these components, cooling is handled completely passively.

Depending on your workload, these can be great value for money (especially with CPUs that are a few generations old). If you need to do heavy compute, these won't fit your needs. For most desktop (as opposed to workstation) use cases, these are great.

https://www.aliexpress.com/wholesale?catId=0&initiative_id=S...
Why only flights? Just ban all nonessential travel. Also ration food to prevent people from eating too much.
The SEC only had a chat with him because it has to maintain the facade that it does something.

The mortgage crisis showed that the SEC is a toothless revolving door of rubberstampers. And still is.
Sorry then, I misunderstood what you meant by:

> a path is always found on one flip of the switch

I thought you were taking the comment you replied to to be seeking a simple parallel arrangement of SPST switches, so that turning any one on would turn the light on.

So I was explaining that No, point is you want 'off' on any switch (regardless of the state of the others) too. Seems you understood that though. :)
10,000 hours programming is not specific enough of a target to equate to Gladwell’s examples. It’s like saying “I practiced playing sports for 10,000 hours, so I am a professional athlete.”

Now, if you developed using a single language targeted on a specific platform for 10,000 hours while challenging yourself at a high level, you would have a very strong level of expertise in that area.

Furthermore, Gladwell made the distinction that the hours spent should be deliberate and tailored to improve skills. Working on tasks handed down to you by your superiors at Google is not deliberate practice.
Man, stuff like this is so depressing to read. Like this is supposed to be a forum for showcasing new tech, projects, etc. What's the point of having this if people in the industry are going to say, "I don't like it because it's not backed by a trillion dollar company". What will change ?
I recall this being very much the case with Mad Dog McCree.

The novelty of live video wore off pretty quickly once you started attempting to play the game.
What capital is that shareholder taking elsewhere?

Once a company has sold a share, it no longer has much direct interest in the value of that share on further transactions (much like a publisher only gets value from the first sale of a book, all other sales of that same book produce no value to the publisher).

Sure, further share sales may become more difficult, but that is a distinct effect.
People will complain if you put any change in positive terms. But of course there are upsides and silver linings.

I won't get into some contentious discussion, but let's just say it's more and more viable to grow and produce wine in Denmark, which is on its own a positive thing. So that's just one example of a positive change.
Just FYI, the term Parametric Programming [1] is also a longstanding term used to denote a type of mathematical optimization technique, first coined in 1952.

The technique converts an optimization solution into a function of its parameters, so instead of a (re-)solving an optimization problem each time the parameters change, one only needs to evaluate a function.

[1] https://en.wikipedia.org/wiki/Parametric_programming
The author implemented exactly this. The interactive example at the top of the page has a 'Hash the input?' checkbox.
> I don't know what the solution is for trying to promote better cross cultural understanding.

I think that's just it: trying to promote better cross cultural understanding. That's something I tried with the GP here, but I could probably write up an article to be linked to in such discussions.

> metrics like "How many meals per day do you get?" and "What kind of shelter do you have?"

I think this is a good thought, a focus on qualitative differences in lived experience using quantifiable metrics. With that approach you're less likely to offend rather than inform. Might be best to skip the "less than 1/2 of one percent of Americans were poor by standards in India" since it seems to suggest that American poverty isn't "real" poverty.

I would even go so far as to say that communicating the cultural context is far more important than underlining the economics, the former of which TFA is attempting to do.
It will likely take a lot longer than that. Most in the public ( or even in Tech ) wont care much about this scanning. And Apple's performance will be so good they will write this off as a small beep in their history. It will then take another few years of "good intention" before anything really happen. So I say this is going to take a good 5 to 10 years.
C is just syntax sugar on top of asm.

We can go on and on. Syntax sugar is a compiler-level of abstraction.

It’s good
Hughes and viasat deserve their thrashing by starlink. They turned a technological triumph into rancid consumer exploitation, preying on ignorant satellite TV consumer markets. Source: I used to sell and troubleshoot that crap to people that had no business using anything more technical than a milk carton.
> Statistics are a reflection of reality.

No, they are the output of a process. Whether a process reflects ‘reality’ is dependent on the process and how people understand it. This is essential to science.

Even when statistics are the result of the best scientific processes available, they are typically narrow and reflect only a small portion of reality.

This is why they are insufficient.

> When you say that the stats don't matter,

I never said they don’t matter. I just said they were insufficient to convince people who are afraid.

> you are saying that the reality doesn't matter.

Since I’m not saying they don’t matter, this is irrelevant.

> It's not that making this about the stats will solve the problem. It won't. But neither will any technological change. You can not solve an irrational fear by making reality safer.

Can you find a place where this contradicts something I’ve said? I haven’t argued to the contrary anywhere. I don’t expect to get the fears to go away.

As to whether they are rational are not, some are, and some aren’t. We don’t know which are which because you don’t have the stats, so we have to accept that there is a mix.

> Will you use stats? Appeal to logic?

Probably a mix of both, maybe some demos, who knows. I won’t expect them to be sufficient to silence the people who are arguing in favor of weakening encryption, not make parents feel secure about their children being protected against predation forever.

> You almost completely understand the entire situation right now, you just haven't connected the dots that all of your technological "solutions" are subject to the same problems as the current debate.

Again you misrepresent me. Can you find a place where I argue that technological solutions are not subject to the same problems as the current debate?

I don’t think you can find such a place.

I have fully agreed that you can’t escape the vicissitudes of the current debate. Nonetheless, you can still produce better technological solutions. This isn’t about prevailing over unquantifiable fears and dark forces. It’s about making better technologies in their presence.
i just copy the .dot file and launch emacs. in a few minutes without touching anything i have the same environment.
Ah! Had no idea. Guess the point is true twice over then. What a quietly great company.
My experiences with homeless people in California are very limited to my trip there 10 years ago. I did have a really good conversation with someone giving me some tips about SF for a dollar, and I was robbed by someone else while walking home late at night.

Neither of those guys seemed mentally ill, but if my own country is anything to go by, a lot of these people have serious mental issues to deal with, and sitting them in a flat isn't gonna solve the underlying issues.

One of my best friends is a social worker for re-integration of homeless people, and getting them a flat is actually the very first step. A particularly illuminating example he told me about is that he often has problems with landlords, because the people he is trying to house do not shit in the toilet, but will do so in the hallway or somewhere else on the property.

There's a lot of work necessary from social workers, psychologists and doctors to help people who were homeless for a longer preiod of time, and it has to be a longterm commitment.
> You can both commiserate on how bad your managers are

And that's all the person you were replying to was saying. You can have things in common to talk about, and also have things that are so different you can't even comprehend them.
I've seen some delis list prices per half pound instead of per pound
"Laws are not being enforced! Let's make new laws to require that laws be enforced!"

What is wrong with this picture?
As anyone who has seen an old Technicolor film knows, it looks weird. Blue eyes look like they glow. Pink faces look like they've been painted peach. Red looks scary. It all looks dyed, not recorded... It's also why most early films nearly cause eyestrain — especially the famous film The Wizard of Oz

I never found technicolor (The Wizard of Oz, in particular) to be terribly unnatural or hard to watch due to bad coloring. Is this a common perception?

The colors in the film are quite vibrant and I wish I could have been in a theater for the original release to experience the big reveal from black and white to color. That must have been amazing for those that were experiencing color film for the first time. (this wasn't the first color film, but it was an early color film)

I've seen the film in a theater, but I don't know how close modern prints are to the original release, maybe they've fixed up the color.
Worth noting that TDAT took the concept of the AMOC collapsing and turned it into one of the most absurdly unscientific science-based films short of Armageddon.

But it was pretty entertaining if you could find a way to stay plugged into the movie and not feel disenchanted by the concept of polar cyclones icing things with tropospheric air. Still, there was that initial kernel of truth to it, which is what we're reading about now.

(not a climate guy; I'm probably getting some parts of this wrong)
>over-the-top bait product

Calling it over-the-top bait is so strange to me. He seems to have put so much effort into actually making the dish good and then was surprised that people liked it. Like he actually tried! Was the joke that people who buy $72 meals are idiots? It's like a student who tries really hard in a class as a "prank" on the teacher.

Maybe I don't get the joke, but if I went to relatively cheap restaurant and saw a $72 dish I'd expect the dish to taste good. If it did, I'd be pleasantly surprised and tell others about it, if it didn't I'd feel ripped off and probably never order there again. If me being happy and well-fed is the purpose of this prank, then I wish more pranks were like this.
This makes sense primarily if you assume people who stick to Emacs do so because of its SW development capabilities.

As a person who hangs out amongst Emacs communities, this profile is not the norm.
How common is it for carpenters to make their own tools? I actually don't know!
Interesting! Aaron Hsu agrees. https://www.youtube.com/watch?v=kIItfQJEVdM
I don’t think you’re wrong at all. I was not a kid at the time, but APL was the first language I learned. There is one drawback: it kind of spoils you. If you continue to do any programming you’ll probably have to use other (inferior) languages, and you’ll always miss APL.
Why is this the order it must be in?
The order of wavelengths of light passing would be: green -> blue -> red ?
Doesn't make intuitive sense to me. Can you explain?
A bit off-topic: is there a law requiring that sex toys must be blurred out? Even the ones that just look like a bent piece of silicon (not dildo-like)…
I can't believe I'm defending Comcast, but it does seem to be a good idea to serve requests with high initial bandwidth since most of them aren't sustained downloads.

That of course doesn't leave out that they'll detect being benchmarked like auto companies do with emissions testing and then switch to fake-out mode.
Random Generators
The guidelines are very far from being an exact science and your comment is too subjective.

And even if I started it, it was up to dozens of others to not comment on my comment. Could have just downvoted it to oblivion.
I actually just started using emacs recently, specifically doom emacs. It works smoothly out of the box and is super easy to enable LSP for.

I'm not going to try to convince anybody to switch, but if you ever try emacs again, would definitely recommend trying out doom emacs.
I keep hearing that torture doesn't provide reliable information. And then i read that an organization that specializes in obtaining information uses torture extensively.

Either nobody holds them accountable for when their dodgy intel doesn't check out or i have been misled and torture does in fact yield good results. Which one is it?
Homelessness is not just about finding/funding a home. You need food and transportation for a job.

In some sense, you are correct. We've torn down about a million SROs and largely zoned out of existence the ability to build Missing Middle Housing in mixed use, walkable neighborhoods.

This is a primary root cause of lack of affordable housing in the US. You need a car to get anywhere from the suburbs and it drives up the baseline cost of housing.

There are myriad other issues with our housing policies, but no it not just enough to build more housing, though studies show simply building more helps. It's also about building the right kind and we aren't doing that which is helping fuel various trends, such as living in RVs, the Tiny House movement and other alternatives people are pursuing in the face of cities simply not creating the kind of housing they need.

https://en.m.wikipedia.org/wiki/Single_room_occupancy

https://missingmiddlehousing.com/
To be clear, I definitely didn't want examples in terms of links to the actual content. Just a general description. Like, was a beach ball misclassified as a heinous crime, or was it perfectly legal consensual porn with adults that was misclassified, or was it something that even a human could potentially mistake for CSAM. Or something else entirely.

I understand it seems like they don't want to give examples, perhaps due to professional or legal reasons, and I can respect that. But I also think that information is very important if they're trying to argue a side of the debate.
A ton of the products have a plurality of "Half Creepy" votes. I suspect it's because people wanted to see the results and you have to vote to see them. Half-creepy is populated by default.

Fun idea, but I don't think there is much valuable information to glean from the ratings.
Computer vision: Spatially varying blur detection
I feel like that's conflating yet a third kind of poverty: having no societal respectability. Having no social "credit." No https://en.bitcoinwiki.org/wiki/Whuffie .

Being in poverty but of a high caste in India, is pretty-standard "absolute poverty."

Meanwhile, being well-off but of a low caste in India, is more like being a recently-freed black slave in the ante-bellum southern US.

That experience is really nothing like absolute or relative poverty. It's its own kind of horrible. (It's an orthogonal poverty, one could say.)

It does lead to a vicious cycle that connects it to absolute/relative poverty, though, since having no societal respectability means people aren't willing to offer you any opportunities to better your situation, because they think badly of you and expect you to squander them.

But I would say it is nevertheless best to think of a low-caste homeless person in Delhi as having three distinct problems: relative poverty, absolute poverty, and poverty of societal-respectability.

I would note that, while a regular homeless person in Toronto might not know anything about the sheer inhumanity of being of a low caste in India, a drug-addicted homeless person working as a prostitute to feed their addiction would actually understand it somewhat. In both cases, for example, if someone in these groups gets murdered or otherwise wronged, the police don't even bother to investigate — so they have no access to justice. The low-caste homeless in Delhi and the crack-addicted streetwalker in Toronto would see the same looks on people's faces, and understand them to mean the same thing.
There has to be more, because in Europe, and particularly in southern europe there has been slavery for thousends of years. Everyone has been slave to everyone, like a free for all.

Yet there's no one making claims based on that, and I'm not aware that such claims existed in the past neither. People just accepted as a fact of life and moved on.

If you look at how all the relations played out between southern europe, the Ottoman empire and northen africa in general, you'll see this isn't from so distant past.
I live one town over from Oakhurst part of the year and it's really just astonishing to think of it as any sort of tech hub at all. It's too bad that Sierra took all of that when they failed.
Over the last few years I have moved my entire Digital life to the Apple eco-system with a deep belief that Apple would care about "my" privacy for the long-term. And with this move to create a backdoor on the iPhone is making me very worried about relying on the Apple ecosystem.
That would be so cheap. Haven't seen that before from Googlers - they have been really good about not influencing HN discussions, IMO. (Perhaps this angle is their kryptonite, though?)

Have seen it a lot in Microsoft-related stories, to the point where I've refrained from commenting, because I know a giant pile of downvotes/flaggings would be incoming if I were to write anything negative.

Haven't experienced anything like this with stories about any of the other large companies.