skysight-inc/HackerNews huggingface dataset:
Is there a way you deal with multiple email accounts? I found this to be the hardest thing when using mutt (neomutt). Clunky macros to change accounts.

The second hardest thing was actually streamlining using it with gmail accounts.
> CORS does not protect anything from anyone. The same-origin policy stops code from one site reading resources from another site. CORS selectively removes that protection – it decreases security.

This comment comes off as either disingenuous or needlessly contrarian, and in the process tries to make points that fall somewhere between completely wrong and miopic.

Your personal assertion that CORS somehow decreases security is based on the patently false assertion that at any point in time requests only came from the same origin. Not only was this never the case, this ignores the fact that with the popularity of REST and SPAs and microservices and API-as-a-service, the norm was since switched to having browsers make requests to anything other than the same origin.

So, without CORS, you have a all-or-nothing security model, where the needle would always pend to the "nothing" side. With CORS, that needle can point "all that matters", which is pretty close to the optimal same-site solution. What CORS does is allow developers to abstract away the definition of "same origin" to mean "the origins that I explicitly allow".

You simply cannot claim that allowing only requests to the origins you explicitly allow is an erosion of a security model. That makes no sense. It made no sense when implicitly that list was only comprised of your own domain, it makes no sense now when that list includes reputable APIs that you pay to use.
Ah, yes. I was having a discussion with BSD folks about how I was missing the equivalent of "service reload sendmail", and they replied that I have no business managing my own mail server if I don't know I should send SIGHUP to the process. I said that's great but this is my home box and I don't see how it helps me to be an expert in every service that's running there. For large installations, sure, there should be a dedicated email person. But are smaller installations not allowed to run sendmail so that cron can send its messages to some central place?
add a straw to that equation and they mix, but yeah les hope vr headsets get smaller and lighter in the future
Surprised it isn't running a CANBUS system.
Ask HN: What's your recommended video conference room setup in 2022?
I've tried a lot of different approaches over the years: Mac mini with wireless keyboard and trackpad, wireless speakerphone (e.g. Jabra), Chromecast...

We're currently using smart TVs that have AirPlay support. I'm not a fan.

I'm leaning towards reverting back to "dumb" TVs with Owl cameras [1] and Mac minis.

What would the perfect setup for a small to medium size office (100+ folks, half a dozen large meeting rooms) look like? We're 100% Apple and I'd rather have "it just works" system, even if slightly rigid.

Zoom Room? ClickShare? Is it worth the price? Are there alternatives? What's been your best experience?

[1]: https://owllabs.com/products/meeting-owl-pro
Are real wages measured by computers and TVs?
It feels like someone should have disassembled the protocol and created a way to hook in as a pretend extra client by now (that just looks like your user) but Google's become very bad at making these sorts of resources available.
CORS is about making the web browser behave in a certain manner, and not the web site, and not the end-user.

Once fully understood, it is useless mechanism of security theater.
"Easiest way to build a CRUD app".

Using the CRUD-app-building framework in which you are competent.

Beyond toy apps there are no shortcuts without that competence but there are plenty of prospective frameworks to develop it in, as evidenced by the other comments.
White hat hacker awarded $2M for fixing ETH-creation bug
There's a company that actually does factorio in interviews, was mentioned on HN
Big companies “net zero” claims are inaccurate according to a new analysis
Were those men genuinely bisexual, I wonder? Gay men pretending to be straight and ending up in family marriages is a very long standing issue, or was at least, I thought the "lavender marriage" was dying out.

https://slate.com/human-interest/2016/05/over-80-percent-of-...

"The massive 2013 Pew Research LGBT Survey found 84 percent of self-identified bisexuals in committed relationships have a partner of the opposite sex, while only 9 percent are in same-sex relationships"
Yaw String
theyre not mutually exclusive, one can want immersion (VR) while gaming at home, and AR while going about ones day in the world
Qemu doesn’t support vmnet (so you cannot have host-only and bridge network modes using Mac hosts)
Spoken like someone who as never met a Chinese factory worker before. Today's Foxconn workers have much more comfortable lives than their parents who were working a factories making low quality trinkets. The generation before that were largely peasants who lived through famine.

>printed dollars backed by nothing

If it were backed by nothing they wouldn't accept it. Money can be exchanged for goods and services. China is receiving more steel, oil, and pork than ever by exchanging it with dollars.
Yeah, I think people are mostly confused here. Open access is a thing when we're talking about peer-reviewed journals. arXiv hosts preprints, meaning they are available before the peer-review process has proceeded. So calling arXiv papers "open access" is misleading, because that label carries the assumption of peer review. And I've never heard of "gold open access" either. Researchers paying to have their papers published is standard, open access or not. That's just how it works. If someone is using the term "gold open access" I'm just going to assume they have no idea how science publishing operates.
Interesting, I would love to hear more and/or read the lyrics!
are you saying you rely on "pre-selection" of the journals and for that the demand exorbitant prices? why dont you rely on peer-review data on scihub itself?

is the pre-selection such an important thing that these companies necessarily have to remain in business?
Smart Kid!
Yep, and I have two DAC, one fiber, and one twisted pair SFPs in it. Works well and DACs aren’t exceptionally costly. The fiber goes to a 10g uplink on the old core switch I got on eBay.
Lots of dog "breeds" are really just genetic defects created and perpetrated by inbreeding.

Because humans think an animal with a face so deformed it has trouble eating and breathing is "cute".
Oh totally. I was just annoyed that the prompt after that was “see! You actually don’t think torture is wrong!”

The site seems to think that morality is a set of unparameterized rules blindly followed. That is frustrating.
A new Chinese rocket company has raised more than $100M
I’m using DD-WRT/openWRT but on Netgear routers, I think on Asus routers you simply have to upload the firmware via tftp if the router’s GUI makes it not possible.
I suspect that's because the AI was trained on the internet including all historical documents i.e. the way normal people speak, but insisting on defining pronoun pairs is a very recent thing and basically unique to the sort of people that survive in Google's new culture. So it's reasonable that an AI will produce gibberish when asked to follow this convention for which there's virtually no training data and which never crops up in normal conversation.
Better then a top level wildcard.
I wonder how would mean / median income development look like, if you cut out the top 10 percent and bottom ten percent..
> Can someone give a real example, since I have no idea about quantum physics.

I have a degree in theoretical physics, and I'm pretty sure whoever wrote this press release does not. Like they are using some of the right words, but putting a lot of emphasis on stuff that isn't particularly new or interesting.

This is as far as I can tell basic research. It's pretty far away from application. Although historically a lot of the QP research has benefited electronics, so dunno, maybe it'll eventually make for a new form of transistor or something. But that's just guessing.
I also feel MBCook is probably right. In this particular case, however, there does not appear to be any argument for prosecution that does not immediately look preposterous as soon as you give it any thought. If this is so, then, by equivocating - for political expediency or any other reason - the DA is inviting doubts about his competence or integrity.

I'm hoping that "the issues at the heart of the investigation have been resolved through non-legal means" is a paraphrase for saying that the DA pointed out to the governor, directly or through his aides, that any attempt to prosecute would fail and bring down a heap of public ridicule.
Another major failure of the methodology is that it fails to take in to account all of permanently lost key/locked up BTC.
Well and what editor can you use that isn't either a bloated Electron app, a bloated Java app, or a bloated C++ app?

Comparison to its next best competitor is the only thing that makes sense IMHO.
I live in the UK, you can have a patch repair done to jeans, or a small alteration done for ~£10-15
Getting 403 Forbidden. Did my isp block it, or it this an error on their end?
The title here says "Object about to hit moon is from Chang'e 5, not SpaceX", the article says it is still not confirmed, and is just a best-guess.

The actual article title is, "Corrected identification of object about to hit the moon" - HN often fixes titles that have been paraphrased or inferred, like here.
It could have been a catchy quote had they just used general wording over gcp terms. "Api keys are for machines, passwords are for humans."

(Also, I'm pretty sure an api key is a form of authentication.)
I understand how it works, but adding unnecessary conditional server side logic to fix a limited spec is a poor solution.
I have like 30 extensions to give it the same level of functionality (or more precisely, the subsection I use), and it takes less than Webstorm.
Tox is peer-to-peer chat, Dino uses the federated Jabber/XMPP protocol. So on Tox your identifier is your public key, while on jabber you get a user@server address (which is usually the same as your email if your provider supports both protocols). Nowadays people interested in P2P chat mostly use jami.net or briarproject.org, both really cool. Briar in particular uses both a gossip protocol for local conversations (like Secure ScuttleButt protocol) and Tor onion services for internet-wide communications.

Both XMPP and Matrix servers can also be run on your own device (p2p): in XMPP world it's more common for ZeroConf LAN chat (to chat with other peers/servers in the LAN, not internet servers), while Matrix project is spending some efforts on Pinecone based on libp2p/yggdrasil to punch through NAT and (if it succeeds) offer proper P2P internet-wide. They have different trade-offs: XMPP protocol is more lightweight but less consistent about eventual delivery of messages when some servers can be offline at any given moment (it was initially designed as a live message-passing protocol).
In India, we have UPI and other forms of instant transaction system (all of them are free in any decent bank, I believe).

With UPI, you can connect your bank account (no matter which bank it is) with any UPI based payment app and create IDs which can be shared for receiving or requesting payments. (These IDs are unique on basis of both app and bank).

So I can connect my bank account to gpay and create a new ID. Send them to others who are using gpay or any other UPI app (bank apps also have UPI functionality built in). They can send the payment to the ID (which will be automatically added to my bank). This is instant.

It can also be used for requesting payment by others and I can accept or decline the request.

Alternatively, phone numbers can also be used to fetch the IDs a person has if you have enabled it (it's by default)
is setting up and maintaining an xmpp /jabber server and clients easier/difficult than matrix?

i have been mulling the switch to a selfhosted thing for some time now but i need something that can run on low resources but isnt overly complicated
Ask HN: App ideas to learn Phoenix / Elixir
I've been wanting to learn Phoenix / Elixir for forever basically and have never gotten the chance. This year is the year. Most of my side-projects are small, single-user focused apps but to learn and take advantage of Phoenix I want to focus on something social, collaborative, real-time maybe. Any ideas for something fun HN? Maybe a game? I'll probably write the client for mobile/iOS if that helps but I'm open to anything really.
jasonette.

https://jasonette.com/

I would still build a crud app with the frameworks and dependency hell you are referring to. Magic solutions tend to save time in the short term but often cost more than it saved in the mid to long term.
I always hesitate to return the commented expression or nil or '(:comment expr...)

Nonetheless comment macros are neat. Just like #_(ignored) in clojure or else.
As others have mentioned, see if you can rope together something with a Google form and sheets.

Django is great, you can get very far with it's defaults e.g. it uses local SQLite db.
This is the right answer. There are use cases which are served well by simple builders - temporary or event-related apps, short-lived internal tools, etc., but if there is the faintest possibility that this will require maintenance and extension - and "can last for a long time" points to this - you need something robust that you can reliably tinker with.
I grabbed an old, used sewing machine in grad school to repair some things. Sewing is one of the simplest "practical" skills, I'd encourage more people to learn the basics. I have taught a bunch of people in about a day, at least enough to make very simple garments and patch more complicated ones.

The real downside of it, now that I'm older, is that it's very time consuming, especially for larger projects. Sinking a couple hours into getting set up, measuring, cutting, sewing, etc is just hard to fit in. Clicking a couple buttons on Amazon and getting it off my to do list is often a lore more important.
Stream big: how Netflix changed the TV landscape in 10 years
If you have a lock with no keys, it is secure, since it can't be opened. As soon as you have one key, the lock is less secure, because now the lock can be opened.
Yes! Nice catch :)
Oh that's sad.

Only good thing about this is that Mozilla is working on v3 support.

> Manifest v3 is a large platform project, and some parts of it will take longer than others to implement. As of this writing, we are hoping to complete enough work on this project to support developer testing in Q4 2021 and *start accepting v3 submissions in early 2022.* This schedule may be pushed back or delayed due to unforeseeable circumstances.

Unfortunately, this article was written in May 2021. As far as I can see there's no update to this article yet, so we don't know what "early" 2022 means.

> https://blog.mozilla.org/addons/2021/05/27/manifest-v3-updat...
plonk based proof system can take advantage of an existing universal setup (like Powers of Tau ceremony). I’d be curious to know more about how Mina approaches this though.
For non enterprise graded CRUD apps, I usually go the PHP way, it's not sexy but it's cheap to run both in term of server cost and brain space to worry about what could go wrong, doesn't require constant maintenance and is likely to outlive the majority of what is considered sexy today.
Nice link, thanks - adding a bit of context for others: this is the course curriculum for the "AGI Safety Fundamentals" course[1] taught by Effective Altruism Cambridge[2].

[1] - https://www.eacambridge.org/agi-safety-fundamentals

[2] - https://www.eacambridge.org/
Makes sense to me. Customer protection means bigger costs => bigger cuts on transactions. I would rather keep the cuts low.
It’s all fiction and fantastical accounts of history anyway, I wouldn’t read too much into any of it.
And now the thread loops

https://news.ycombinator.com/item?id=30320281
I don't get this explanation.

Over one tcp connection, these "unlimited" requests are interleaved, blocking each other for periods of time.

With multiple tcp connections I can have parallelism. It seems like for larger requests, you would suffer performance loss with http2? What am I missing here. Must be something.
Oddly enough, MDN is a far superior resource for manifest V3 than Google's own documentation.

This is really odd because Firefox doesn't even have a manifest V3 implementation yet.

Anyway, to answer your question, MDN is for sure the place to go.
>Is it a stupid question?

It is not a stupid question at all. A problem I thought would have been solved by now or very closed to solving it. But we are not even half way there. Especially the self hosted API and services part.

Basically you want to bring Native App development model to the web. Although I think WebObject in the old days were quite close?

The current recommendation are Laravel, Rails and Django.
https://github.com/rafagafe/tiny-json
I love using C# and SQLite with EFCore for this kind of applications. Then I put it behind nginx.
When/where can we buy this for use at home?
Show HN: Colordle – Guess the color and create unexpected, beautiful gradients
It's merely inventing arbitrary language rules designed to confuse and intimidate ideological opponents and deserves no place in AI. It also makes people who do it look ridiculous.
Do you have the youtube mobile app? These videos show up there with a dedicated UI, a bit like Instagram stories. I have never used TikTok but I imagine it is a bit the same concept and a market they are trying to compete in.
My theory is that through these short video UI elements people watch a lot of them (it keeps playing new, short videos, no-end, a bit like infinite scrolling I guess), this gives these videos a lot of views, the normal recommendation system is not explicitly aware that these videos are 'special' and recommends them outside of the short video UI because they seem to be popular because they get a lot of views. Hence your recommendation page is full of 30 seconds videos you are not really interested in...

This is my theory because I don't think the short video concept works outside of the infinite loop. I uninstalled the YT app after this. I must admit I was spending too much time on it after they added it. Really a shame, I really liked YT.
I'd argue megacartoons.net is the secret sauce as that's where it's fetching the video to put into mpv.
Even aside from speed, the original PinePhone isn't exactly usable if you want to use an XMPP client like this. It gets decent battery life by sleeping, but while it's asleep it'll stop receiving messages via XMPP, which... if that's your primary communication method, is not ideal.

I desperately want to daily drive a Linux phone again, but the current batch just isn't there yet.
I recommend checking out this page even if the content does not pique your interest. The design and structure of this page made it the most pleasant reading experience I had on the web for a long time. It's been even nicer than reading other things in reader mode, despite having configured reader mode to my liking.
Ford patents method of displaying pop-up ads on car touch screen (2021)
I recall being warned not to play this game. Warned of people that started and obsessed over it to the exclusion of all else for months at a time. Panzer Leader and Panzer Blitz were recommended instead.
For many musicians the tools and workflow are a big part of the enjoyment and of the creative process.

While software on an iPad or a laptop these days can essentially make any style of music without the need for additional hardware, there's a sizable group for whom that process isn't inspiring or enjoyable.

There's definitely a lot of gear fetishism in the music scene which is definitely its own problem, but I think that there's value in making music with the tools that work for you, rather than just with what's cheapest, highest-tech, or most versatile.
Getting more and longer ads than a few years ago.
> For the purpose of the demonstration, we're going to use Gtk.Grid to create a grid container widget.

why exactly? a GtkBox is would do just fine, looks better and it's easier to handle programmatically than the grid.
> Again, CORS does not protect, the SOP does :-)

This is simply false. You are somehow wrongly assuming that only same-origin requests exist or are needed. This scenario never existed in the real world beyond the scope of small personal projects.
Reality effect.

Reality is eternal and ever present and will not be denied without consequences.

You can try to lie and deny but reality persists and will often enact revenge of some sort for the effort --- not in some future or invisible realm but in the immediate one.

Science is the religion of reality. It is the imperfect but self correcting and always evolving effort to understand and appreciate the undeniable.

What does your guru have to offer that can truly compete?
From the Wikipedia page mentioned:

> Early innovators of asset stripping were Carl Icahn, Victor Posner, and Nelson Peltz;[4] all of whom were investors in the 1970s and 1980s. Carl Icahn performed one of the most notorious and hostile takeovers when he acquired Trans World Airlines in 1985. Here Icahn stripped TWA of its assets, selling them individually to repay the debt assimilated during the takeover. This particular corporate raid formed the idea of selling a company's assets in order to repay debt, and eventually increase the raider's net worth.
And YC isn't a venture capitalist or angel investor either: it is a company that provides funding and advice to startups.
Cars use CAN for most controller networks. It can go up to 1 Mbps but lots of time maybe 250 kbps. It has advantage of being broadcast so all devices get messages at same time. The wiring tends to have noise reduction properties and floating reference voltages as i recall. For cameras i'd imagine they use something else for bandwidth and ease of use reasons.
Andreas Spiess reviews a high level language on ESP32 microcontrollers
There are people doing this, eg. coopcycle.org.

But there's a few barriers:

- people who are not from the neighborhood will be familiar with UberWhatever but not with your local platform (network effect)

- local platforms can't get away from working regulations (and that's a good thing) so they need much higher margins than multinationals in order to respect the law

- small local platforms need actual money/clients to grow, while multinationals like Uber get VC/whoever money "for free" to spend at a loss just to gain market traction in hope for future profit

So it's like can you and a few neighbors fight with sticks against the tank of a well-funded invader? Sure, but the odds of success are not great. My best regards to worker coops worldwide who help make capitalism a nightmare of the past.
What do you want to achieve or build with it? I'd suggest Rails as it's pretty easy to get something up and running but that depends on what tech you are familiar with. It's boring, has a lot of resources online and doesn't change much so maybe a good choice.
If it were cheaper, I'd buy one. While VR gaming has promise, even today "working in a customised Linux workspace" is a personal killer feature for me.
I’m a huge fan of MerlinWRT on Asus hardware. https://www.asuswrt-merlin.net
Yes, by order of Saddam Hussein
You will always rely on some external services.

Either AWS for hosting or if you go the crazy root your ISP to bring internet to your own server.

Relying on Google sheet and Google form seems like a reasonable safe bet.

Then of course, the simple stack may not be enough, but if it is enough, I am not aware of anything simpler.