skysight-inc/HackerNews huggingface dataset:
Oh, I didn't know about that meme. Explains your reaction to my post. Oh no, mine is more meme that people ignore what exists and miss potential benefits (or just accuracy) for various reasons. So, a consideration of safe, systems programming should include most mature tools (eg Ada) plus any newcomers reaching maturity (eg Rust). I wasn't implying Rust had any connection to Ada: more surprised Ada had no influence on it than anything. I'll be sure to look out for that other meme, too, to call them on their BS. ;)

"I don't know what existential types are"

Unfortunately, I couldn't find a non-dense explanation of it that had relevant detail. Good news is the Ada book I've been referencing has a great explanation with examples. See Ch 2 "Safe Typing" for the answer in the first, two pages. They call them "Distinct Types" in there (shrugs). Included link to whole book in case you see safety tactics worth copying.

http://www.adacore.com/knowledge/technical-papers/safe-secur...

So, they make sure the types and implementation are separate so unique types ("existential types") can catch interface issues that can be subtle and nasty. Casts work around them where necessary while making the risk more obvious. Aim to try to keep overhead down compared to heavy OOP + regular types. Seeing it made me wonder, "Why don't the rest have this!?"

"but we use phantom types for that"

Thanks for the link! Adding it to my list of things to read and review. :)
Pitfalls of Object Oriented Programming (2009)
Academic journals, at least in philosophy, tend to have fairly small line heights. Drafts, on the other hand, are almost always double-spaced.

I wonder if this affects the editors' perception of what a good line height for authoritative documents might be.
> Foreign governments know that people that work at the
> embassy are often spies

That's not true. Perhaps you meant: "there are often people working at the embassy who are spies".
Putin’s closest ally – and his biggest liability
“On Accident” or “By Accident”?
Why not write a JavaScript to Lua transpiler instead?!
There's a big article on the man himself, and it's written by someone whom I know to be have a fair amount of expertise in related topics.

http://plato.stanford.edu/entries/marx/

It seems that SEP's policy is to have articles on either people or topics, but not topics named after people.
There certainly are such algorithms.

The Henry Classification System is one such algorithm and it's been used for more than century[1].

Even in the 1940s and 50s, before digital computers, you could fingerprint a suspect and through a manual application of the algorithm obtain a unique ID ("the same stream of bytes" as you say). You could then do a look-up to see if he had a criminal record.

[1] To be precise, the Henry system uses all ten prints, but single finger classifications also exist.
https://en.wikipedia.org/wiki/Henry_Classification_System
It works for me, except for when I am cycling and want to look at the time.
Why are people comparing reddit and 4chan anyway? They are two completely different sites.
That's not an ad hominem. "You're dumb, so we shouldn't care what you believe" is an ad hominem. "What you believe could only be believed by someone who's uninformed" is not.
More does not mean better
I think some people forget that the browser (and mobile web) is just an app too. One with unlimited content and a really cool back end that anyone, anywhere in the world can update in real time.
I would definitely call them backwards.

The amount of extra CO2 from a car running a better NoX system is utterly irrelevant compared to how much CO2 is emitted.

Trading CO2 for NoX is completely indefensible. NoX is really really bad for the environment.
@geofft that is a great link, our CTO Bryan Cantrill continued to beat the drum at the Docker SF meetup in May 6, 2015. Video and transcript at https://www.joyent.com/developers/videos/bryan-cantrill-virt... . My favorite line is, "And, so in terms of the security of containers, from our perspective they have to be secure because if you're able to break out of a container into the global zone of SmartOS, you could delete the company."

Yesterday at http://containersummit.io/, Bryan's talk "Going Container Native" (video coming soon) was in the same vein, SmartOS (illumos) directly benefits from its Solaris lineage -- Solaris Zones were engineered for security. We, Joyent, absolutely do believe Triton has the security properties that everyone seems to want out of Docker, because Joyent has been running OS containers in multi-tenant production since ~2006.

Open source SmartDataCenter [1], rebranded Triton, is the exact same code that is run in Joyent's Public Cloud. This truth in code, product and service contributed to me leaving an OpenStack company to join Joyent two years ago.

1. https://github.com/joyent/sdc
that was my initial impression i got from reading some posts on the Docker Site, and perhaps there is no consistent definition of "package manager"--to me though, the most difficult tasks a p/m must do are: reproducible builds, dependency management, conflict resolution among transitive dependencies, and the like. But Docker does none of these things as i understand it.
The security property of "secure unless there's an exploit" applies to basically everything (maybe excluding formally verified software), including Xen and KVM, so I don't see how that's a specific knock against Zones. Yes, if there's an exploit that lets you do something you shouldn't be able to do, you can break out of the container/VM. But, like Xen and KVM, Zones are so far fairly successfully used as an isolation mechanism for the public cloud, for some years now. And all three make the claim that you ought to be able to rely on their isolation mechanisms, and any hole in them will be considered a serious bug. Whereas the way Docker is using Linux containers doesn't seem secure enough to make that claim or be used for that purpose, at least not yet.
It's actually pretty easy to bike 15miles to work to Mountain View where google is based. It's super-flat around here.

Been biking to MV for a year now, 15miles each way. Commute times are comparable to car commutes from Santa Clara during heavy traffic
https://en.wikipedia.org/wiki/Russian_Social_Democratic_Labo...

"The RSDLP later split into Majority and Minority factions, with the Majority (in Russian: "Bolshevik") faction eventually becoming the Communist Party of the Soviet Union."
Yes per mile it's worse. However driving is worse for your health in long run. The odds average out in favor of cycling
taiga.io (source: https://github.com/taigaio)
> It's containerization between trustworthy apps; it's not security containerization.

Isn't that what a process is? The containers in Linux are based on Jails from FreeBSD and zones from Solaris. They are absolutely there for security.

Regarding the remaining part of your post, I understand what you are trying to show but python is a really bad example. You absolutely can have python 2 and 3 side by side, or even different minor versions. And with virtualenv or pyvenv (that came with 3.4) you can even have multiple installation of the sane version. If you add setuptools to your application you can easily generate single file package (I personally like wheel) the deployment is as simple as writing pip install myawesomeapp-1.0.py2.py3.whl it downloads all dependencies. There is not much that Docker would help, it only makes things more complex.
Linux containers are certainly intended to be secure. The problem is that the Linux kernel API is huge and privilege escalation bugs are found all the time. In order to make a container secure, you need to disable 95% of this API, e.g. using seccomp, not mounting /proc or /sys, drastically limiting /dev, etc. Sandstorm.io hasn't seen a single working breakout since we started keeping track over a year ago, despite numerous Linux kernel exploits going by in that time, because all the bugs have been in features that we turned off.

https://docs.sandstorm.io/en/latest/developing/security-prac...

That said, there is a cost in compatibility. Most apps can be made to run just fine in this constrained environment, but it does sometimes require tweaks. Docker is more interested in compatibility than in security, so naturally they don't do this kind of attack surface reduction by default. (You can configure it manually, but realistically if it isn't mandatory then few people will bother.)
http://www.theverge.com/2012/11/7/3614506/apple-patents-rect...

Rounded corners.
Why do you bike on sidewalks?
I prefer https://en.wikipedia.org/wiki/Basic_income FTW
Facebook's First 360 Video Is This Impossibly Cool Star Wars Clip
Library Writing Realizations
General Distributed Deep Learning Platform – Apache Singa
Do Ruby on Rails devs also get the same treatment? I know Giles Bowkett talked about Rails/node.js back in 2012 [0], but is the situation now reached a point that JS devs haven't even heard of Rails?

[0] http://gilesbowkett.blogspot.com/2012/02/rails-went-off-rail...
I suppose the idiom is normally supposed to be "heat death of the universe", but yeah, either way, the IPv6 address space is just galactically, unfathomably huge
I don't think you understand utility properly, and sounds like you have a hard sciences bent.

The point of utility is that everyone is different. They will all behave in chaotic and unpredictable ways. The only way to make sense of why people exchange is to make the assumption that each participant in the exchange gains something greater than what they give up. Since the thing they gain and the thing they give up are always going to be different, it has to be distilled down to something. That's utility.

You say that I haven't solved 'the problem'. I say there is no problem to be solved. All we can do is observe the actions underway because there is nothing to fix.

We can't say why the contributors utility is increased, because by very definition, each persons utility is different. You can only infer or measure the subset of those, and make observations. Utility is the abstract class of individual preference implementations. There is no more point in trying to determine the cause of each individuals utility than there is trying to work out the purpose of each class implementation form the point of view of the abstract class. What does it matter? It doesn't.

Open source software doesn't suffer the tragedy of the commons precisely because the utility contributors gain can only be upwardly increased by people using it, and overconsumption of the software has very little effect on the utility of the producers. In the original case of the commons, overconsumption of grazing lands decreases the utility of each individual grazer, but if anything the opposite effect happens in OSS. Assuming one can brush off idiotic bug reports and I'll-advised pull requests, that is. But because contribution is not binding when the cost of contribution exceeds the utility gained, the person switches their time preferences to differnt things.

Incidentally, the evils of central planning are precisely because people try and 'solve' the problem of marketplaces, when there is no problem to solve, only exchanges to observe.
I think that the code that operates dangerous machines should be publicly available. I think that applying the DMCA to keep it hidden is a bad application of that law and beyond Congress's intent.

The DMCA was intended to protect creative works like movies or songs, where the whole value is in the encoded file.

Code that runs a car is the opposite: it is worthless by itself. Keeping it hidden from the public just enables bad behavior.
Keynes should rather be there, with his stupid Stimulus theory that has been proven to be detrimental over and over again, on every single occasion.
This is a common problem here in the netherlands. We've found some solutions. Buy a bike that doesn't look flashy. Spray paint some stripes of pink paint over it. Buy a big lock. Chances of theft go way down.
I use django for big stuff & flask for little stuff (like a proxy server or url forwarding app).
SEP articles are written by individual academics, who often have peculiar writing styles. I suppose the editors try to curb the most extreme of peculiarities, but all sorts of quirks inevitably leak through. Archaism and grandiosity are especially common, since a lot of philosophers spend a lot of time poring through old books.

Wikipedia articles, on the other hand, tend to have a rather bland writing style, the average of all the people who contributed to an article.
> I'm curious why JS is picking up so much for backend development?

The reason I reach for Node on a project is to handle my websockets. I use Django REST Framework + Ember as my main tools (super fast to build with) but, based on my testing, Python can't hold a candle to Node when working with thousands of websockets. It works great for what it was designed for.
Yeah. Node is pretty much all about npm install this and that. I like pyramid but sometimes I do miss the battery included Django offers out of the box. Flask is my 3rd choice only because of the global, makes testing a bit hard.
There is a section in that link titled "Specific Attack Surface of the Docker Daemon". Meanwhile they are ignoring the attack surface of the Linux kernel. There is no mention of seccomp in the whole post.

People find privilege escalation bugs in the Linux kernel often enough that you can't really claim that running arbitrary native code is "secure" unless you're doing something to mitigate these. Things like:

http://www.openwall.com/lists/oss-security/2015/07/22/7

Note that SELinux won't do anything about this kind of bug. You have to use seccomp and similar to disable large swaths of the Linux kernel API, particularly exotic parts that aren't well-tested or reviewed.
Yes - when you hear about zero hours contractors being told on the way to work that there will be no work for them, then the intensive for the employer needs to change.
It might be 20 miles by car, however most places in SV are only a few miles from Caltrain. Just take your bike onboard.

This is why Caltrain has the highest (I think) number of bikes onboard of a commuter rail line in the nation.
Cheating car emissions tests is commonplace, and getting worse [pdf]
Chrome
Wikipedia
HackerNews

80% seems right.
This is a really good explanation... but I can personally only square most of this entanglement non-locality with a many-worlds interpretation. Which is itself hugely problematic.
So does this mean that although $Bb valuations sound like we're in a bull market, it really means we're in a bear market where investors prefer downside protection over a larger share in the upside?
I tried covering it (and showing there's a better way) in this talk: https://www.youtube.com/watch?v=449j7oKQVkc
We just did an internal migration to some ipv6 for some of our internal code so we could communicate with sites that use ipv6...

Long story short, it was hard. Required custom lib recompilations, etc.

I don't have all the details but it was significantly harder than I originally thought.
To be honest, this happens to almost every single Internet forum / community when you open up to strangers. You make up rules, no one obeys. You punish them, they don't care. Sometimes too much rules push people away. Keeping spammers out, keeping post quality up and consistent are just too much work. I was a supermod for some really famous forum for several years. Geesh. It was tough, and when I quit I was only 17. But it was fun to talk to other mods who are in different ages and from different parts of the world. It gave me a lesson of how to work with people as a team, how to deal with troublemakers, and also how to "promote business." After all, your goal is make your forum popular and sustainable.
What you are missing from your perspective is mountainous regions, long distances or fact that some people do not want to arrive too sweaty, but still wish to enjoy the ride.
What is problematic about the many-worlds interpretation. Even without non-locality, it solves the non-determinism problem, which seems far more problematic to me.
A motor under the platform that swivels the user, chair, and floor inside the cage would do it. But I agree with the other commenters that the video does not seem to demonstrate a yaw capability.
> Why's a university holding 224 ip addresses?

224? A /8 leaves 24 bits for the hosts. That's 16.7M addresses
I guess the obvious one would be the Windows Store, but it's not on Windows 7. But that would be the closest comparison to Mac.

Each time I rebuild my PC I head to Ninite (http://ninite.com/) which has a nice selection of fairly general utilities.

Scott Hanselman also does a blog every year or two or three, which, while quite developer (particularly .NET) focused, is still decent for finding new tools. His latest one from 2014 is here:
http://www.hanselman.com/blog/ScottHanselmans2014UltimateDev...
I agree with all of the above. However, when a younger dev asks me which framework/language he/she should learn, my default response is: "If you're interested in employability, learn Node/JS. Practicality, go with Django/Python. Otherwise, Lisp (Clojure(script), Scheme, Common Lisp, hy)."
If you live on the peninsula and care about these issues:

(1) Look at getting involved in a local group advocating a vision beyond car-centric suburbia. Palo Alto Forward is one example.

(2) At the very least, vote in the local elections, especially (and carefully) for the city council positions!

The future of the Bay Area is ultimately in the hands of town governments, not Google, and the only way to genuinely improve it is for residents to get politically involved who have a different and positive vision of the region's future.
It's not meant to be scientific. It's a tool for abstracting a situation down to understand the intent rather than the details.

Your first mistake here is to try and assign a '$X worth of utility' - utility is not a unit which can be expressed in another unit. Someone can spend $x on something which gives them utility, but equally they can go for a hike in the mountains which provides greater utility to that individual than the object bought for $x, yet the hike costs has no $ value and cannot be bought nor sold.

So the circular argument criticism is only circular because you're forcing it to be circular.
But ebikes ride quietly and do not produce smoke. And you can pedal them. Speed is not the only factor here.
This resonates with me a lot, but I don't really know what to do about it.
Unfortunately most docker containers seem to bring along 200+mb of operating system with them.
consider that there are something like 3.35 * 10^22 water molecules on earth

there are 3.4 * 10^38 addresses in the IPv6 space

we could individual address every water molecule on earth and still have an enormous amount of space left over

so even if DARPA is planning on replacing the oceans with dust (and somehow managing to not exhaust a number of critical resources in this drive to make a truly staggering volume of dust), it's still not an issue
Turn it on in your office first, then deploy to production. You'll gain working experience by turning up your office first. Experience with basic tools like netstat (you need -w now), experience with SLAAC and DHCP lite, quickly reading v6 addresses in :: notation, getting familiar with link local addresses (What do you mean every default router in the company is fe80::1?), etc.
I pay ~$40/week in public transport costs to get to work, I estimate the bike is around $5-10 a week (costs for the occassionally required items: new tires; a pump; some gear; lights etc)

A $100 bike I would have paid off in 2-3 weeks

Therefore I opted for a $900 bike which is an entry level road bike where I am. After 30 weeks I've broken even, everything after that is profit.
Fascinating that the economist predicted the decline of the music industry, but everyone who's predicting that 3D printing will destroy the economy of physical things either doesn't understand 3d printing, making physical things, or both.

3D printing is great if you want crappy things made out of a single material. In the future it will be better for things made of some composites, but at the end of the day there are so many necessary processes and materials to create physical objects that 3D printing will always apply to niche objects. You can't print a coffee maker reasonably with any machine (glass? heating element? electronics, etc?) much less an iPhone.

Furthermore, there will increasingly be a software layer. I imagine HN readers are familiar with the economics of the software industry, but I'd just say that if physical objects adopt a software model (freemium, charge for updates, etc), and can do away with global supply chains etc, that will be a net win, not some destructive, music-industry-scale disaster.

That said, I love 3D printing and use it all the time. But it's only useful for customized, on-demand, or one-off stuff. It's already a burden to curate your own goods -- that's what people who are into, say, fashion spend time on -- who really believes we're all going to spend all day customizing our things? Unrealistic.

So, no. Gotta say I don't agree.
That "better" video is worth watching. (It's a series of videos.) I've never seen the full process demonstrated. Thanks.
Pretty much. It is marketing multiple exiting open source Linux technologies (overlay file systems, namespacing for processes, network sockets, chroots) under a set of tools and bam! -- hundreds of millions of dollars in valuation.
While great odds, not nearly true: https://en.wikipedia.org/wiki/Rugby_World_Cup
Not an expert in the matter, but I'm guessing the pressure on such a wall would be too great. One of the things that caused the death of many people in the big tsunami after the Tokoku earthquake was the assumption that if you just went up to the roof of your apartment building you would be safe. Unfortunately, the wave just wiped out everything. Huge concrete buildings were just flattened.

To be honest, I have often wondered how the powerplant survived at all. I guess it was high enough up and that only the generators got clobbered, but I haven't looked into it in detail.
>A rootkit is a collection of computer software, typically malicious, designed to enable access to a computer or areas of its software that would not otherwise be allowed (for example, to an unauthorized user) while at the same time masking its existence or the existence of other software.

Doesn't really describe Docker, does it?
QuickAuth can be used on various Pebble models for 2-factor authentication on google, dropbox, lastpass, and others.

http://apps.getpebble.com/en_US/application/53131df8bb31cf87...

I feel it's safer than 2-factor using my phone because I might let someone else handle my phone to make a call, etc., but never my watch. Plus, I can invoke it faster than I can on the phone.
if firefox is considered "irrelevant", I woudl like to see what he has to say about safari
224.0.0.0/4 is IPv4 multicast space. It's not reserved and often in active use. [0]

If there's software that treats IP traffic to or from 240.0.0.0/4 as invalid, then it's defective. I mean, I get that the broken software is a concern, but -if we care about carving out more IPv4 space- it's not something that we should be overly worried about. :)

[0] Indeed, mDNS/Bonjour/Avahi uses 224.0.0.251 for service discovery.
Could you explain more of your Red X method?

I think that may work well for me when it comes to work. I'm not sure it would be sustainable when it comes to food or exercise, but there's no reason I can't get a reasonable amount of work done every day at work.
The lead exposure is sobering.
No, SIP is a terrible protocol so things will often break unintentionally. A lot of NATs also try to "fixup" the breakage and make it worse.
I'm in Sydney, we do not put parked cars between our bikes and roads but it works just fine with a gutter.

https://www.google.com.au/maps/place/Wynyard/@-33.8687896,15...