skysight-inc/HackerNews huggingface dataset:
> I don't think they provide more restrictions than rlimits.

They provide knobs which actually reflect backing resources rather than limiting something arbitrary like the number of open files. Not to mention that you can limit the amount of kernel memory used by a process (not possible with rlimits).

Also, rlimits have interesting interactions once a process starts changing its user ID or session ID. cgroups are actually linked directly to the set of processes in the cgroup, and it's completely transparent what's going on. rlimits are not transparent and have odd semantics that aren't described in the man page.

Not to mention that rlimits use signals for communicating when you've started to hit some of the limits. This is not a good idea (Unix signals are just bad in so many ways it's not funny). So you can't be sure that your process will ever figure out that its hitting a limit.

> do you think they make any specific attack vector impossible, or harder

Kernel memory exhaustion is harder because you can be sure that your limits are actually limiting the backing resource you're trying to protect. The rlimits for open files and similar things are just not useful for things like that.

Also, there are things like the blkio cgroup which don't have an rlimit analogue. And then there's the fact that RLIMIT_CPU is completely useless (you shouldn't care about how much real time a process runs for, you should be limiting what fraction of the total cpu power it can take up from the system).

In general, POSIX rlimits are just underpowered as a resource control mechanism IMO. Especially since many are more historical artifacts than anything else.
Took a look at some of the code.

I see one for Gov of Commerce:

The Commerce.gov API is under active, but not public, development. As such, API code is not currently made available publically. This Github repository will be used to collect and respond to feedback regarding the API and engage with developers interested in using the API.

---

I don't believe that's the correct usage of GitHub. What's the point if you're not going to showcase the code?
Introducing Operators: Putting Operational Knowledge into Software
It's an example of something the establishment can concede having pretended they care, that has no effect on them. If you care they love it as you will fight harder and longer which keeps you away from things they know will destroy them, like land value tax and questioning how money works.

So it's the ideal example.
I don't think it is the proprietary driver - in the video they say "mainline Linux with DRM/KMS graphics acceleration" - afaik ARM's proprietary driver doesn't use KMS.
‘The Voter Suppression Trail’
Request for product: Ask me ~100 questions, and then tell me how to vote
I'm expecting backlash against this.

Even with the downsides, I still believe this would overall be a force for good.

I'd want to know how to vote on the entire ballot
Pining for a new voting system is just pushing the hard work of coalition-building to after an election instead of before, and pretending that the coalition building isn't important to boot.

You could certainly rework the voting system so that a wider mix of parties are elected to Congress (and every other level of government), but then what? At the end of the day, parties aren't important, policy is important, and enacting policy still requires some sort of majority. A majority, when you don't have a homogeneous population with largely similar views on everything, still requires some sort of coalition. And the coalitions you build affect the policies you can enact.

So how will changing the voting system, either to your current favorite or to some hypothetical, not-yet-invented voting system affect coalition building and the sort of policy that will be enacted?
No, Due to the relativel low volume of updates we have a weekly digest. Good enough?
I notice this too. I have to force at least some of my daily routine into my vacation or my stress levels start to climb. I'm a stress eater, so when I notice my calories shooting up to 140% of TDEE and beyond, I know I need to find a quiet room and write about 700-1000 words, my own form of meditation. Just a complete brain dump onto the paper, out of which some conclusions can flow, and then I'm good again.
Public domain just means it can't be copyrighted. It doesn't necessarily mean it has to be distributed to the public.
Google launches counteroffensive in battle with EU
That's a very small slot for putting packages through.

How do you handle a box?
Seconding that, Firefox 49 on Windows7.
So ask me a series of questions to determine what I care about and in what magnitude, and what my incentives are, and then tell me which candidates and propositions align with my incentives

Specifically would like this to exist for all votes, so should get my location so you know my exact ballot

If anyone builds a good version of this I have a few decently high traffic websites and I will happily link it on them.
The CHIP and PICO-8 are so fun. I've been trying to find time to finish my VisiCalc clone: https://twitter.com/radiofreejohn/status/784050276198080513
Are you seriously requesting an explanation of what harm cigarettes are doing to society?

I suggest you have a trip to to a respiratory ward sometime.
> As a woman coming from a non-technical background (physics)

That's a new one for me. I guess she means her connections aren't in software, but physics is like the most technical non-engineering field I can think of.
Since steroids are demonized, I had to make a throwaway account. Testosterone does not increase aggression, even when given in doses far above natural limits. [1] [2]

When I'm not programming, my hobby is bodybuilding. To make it as a bodybuilder, you have to use steroids. With a sample size of ~30 (fellow lifters and me), I can tell you that more testosterone makes you calmer, leaner, and bigger. My stress and anxiety on steroid cycles vanishes and all that's left is confidence, even with powerful steroids like trenbolone.

This study was designed by some of the most incompetent people around. Athletes inject long esters every 3-5 days and these guys were doing a shot every 8 weeks. Athletes take additional drugs to control the conversion of testosterone into estrogen (the hormone behind acne and mood swings). If I had designed this protocol, it would've looked like standard Testosterone Replacement Therapy (TRT) plus an injection of nandrolone decanoate every week (which is great because it heals your joints). Of course, good luck selling bi-weekly injections.

For decades we shouted about reefer madness from the rooftops, arrested millions of people and threw them in jail, and expanded corrupt government agencies because marijuana was "dangerous". It seems like we're learning our lesson on that front and I hope we get our act together when it comes to hormones.

[1] https://www.ncbi.nlm.nih.gov/pubmed/8855834

[2] https://www.ncbi.nlm.nih.gov/pubmed/12062320
I got mine! It's not perfect but I do love it.
Cough.... Photoshop...Cough...Lightroom
Yeah this was unfortunate! I preordered in April or May and didn't get my CHIP until September but it was a fun and worthy wait.
Ready for Social Robots?
As someone with two kids, it makes me feel sorry for him too. The early years are a lot to miss out on.
I'm almost positive threads about GoPro are stalked by Xaomi employees. Almost every comment is a plug.
It's not so bad to not have a GPU at all (though given that ARM owns Mali and you're licensing from ARM anyway, it seems prudent to have one if you can). The real problem is not being able to use the hardware that is there due to driver issues.
Do you have any proof it is safe, or are we just basing our decisions on feelings?

I'm personally not comfortable inhaling your random unknown vaporizer gases. Many chemicals are dangerous at levels you are not able to smell, or indeed have no odor.
In addition to the point already made that the government has no obligation to release anything, code written by contractors is generally copyright by the contractors.
> Aren't Australians encouraged to not write "fuck you" and things on the ballots as people sarcastically participate?

Yes, donkey voting is a problem as well. But there's a stigma around it as well (as that article shows). Invalid voting on the other hand doesn't have a stigma around it.

> Couldn't you just do the exact same thing with "valid votes" and say the same thing that the parent has said?

Maybe. But if someone makes the decision to tick random boxes rather than write "fuck you" then it's clear that they've made a decision to make a vote. It's a grey area, and I despise the issue of donkey voting, but you can't deny that the person has "had their say".

However, the number of invalid votes is counted though. And even considering invalid votes, the percentage of valid votes is better than most countries which don't have mandatory voting. Not to mention that invalid voting is known to be a method of abstaining from voting. I don't know what the stats are for donkey voting, but I doubt that a large enough portion of people do it for it to classify as that large of an issue.
Do What Scares You
The fact that you are being down voted illustrates who posts on HN. "Ads allow me to bring you awesome content". "Without ads, the web as it is today wouldn't exist". "Content providers!" This is true in a minority of cases. The problem is everyone who has a garbage app or a garbage site thinks this is the case for them. Most of the time their content is worthless. These are the most vocal. They spend more time on SEO BS than content or making an app that isn't horrific. If you have a good app or a good site, people will pay via ads or subs. The web would be better if everyone used adblock or ublock and these people found a legitimate way to earn a living.
How unfortunate, hopefully the culture in the city doesn't go stale and homogeneous.
The comment was about the variability, not the cost.
They said what they think the point is in what you quoted: "to collect and respond to feedback..."

I can see why you might not like it, or not agree with it, but it's not like they didn't say it!
Curiosity cost $2.5 billion. Round it up to 3 since it's a round trip. You'll have to bring back 200,000 pounds of platinum to break even. That's like 3 or 4 Sherman tanks.
Show HN: Keygen – A dead-simple product licensing API built for developers
Only 20% of it by the looks of things ;)
You're right: the cultural center has shifted glacially to the left over time, with erratic jumps back to the right when the Republicans actually hold supermajority power, followed by further gradual leftward drift when they lose it.

Though in an economic sense, yeah, my original point stands. And actually, it's strengthened in a way: how can we talk about the median voter theorem pushing the parties to the center if they spent the whole most recent party system both moving strongly to the right on economic issues while moving erratically but consistently to the left on social issues? That would mean there isn't even one center!
I've noticed this too, some says it's a bad habit energy we've developed in our modern society, always running to the next thing, always looking to consume. It's as if there is a sense of uneasiness that comes along with stillness.

Maybe we need to relearn the art of doing nothing?

I've been out of full time work for a while (mostly voluntary due to travelling) and I can, after 6 months feel myself beginning to settle somewhat, The first week of lying on a tropical beach did feel a little bit like torture to be honest!

I do meditate, but without being in a meditation community or "sangha", it can be hard to stay at it for extended periods, especially while travelling.
I wonder what I'd get from my Surface RT that I paid more than a pretty penny for a few years back. Would be nice to "trade-in" for a decent discount on a Surface Pro 3/4.
Even in technology, which is just a slice of all of (say) American enterprise, it's hardly an accepted norm that new business starts must be funded by investors.

What's instead happened is that people who pay attention to message boards like this are afflicted with a kind of snow blindness from all the random businesses that do get funded by third party investors. It is true: if you want to be funded by third parties, you will need to build a certain kind of business, and that business will look a lot like what Paul Graham defines as a startup. There's a lot of debate about whether and why this is, but the math is straightforward: if you want to take a few million dollars of O.P.M. to build a business with, you need to aim at the moon and hit it for those investors to have a viable business model.

What people who don't build businesses on O.P.M. object to is the notion that O.P.M. is the only way to start a viable company.

So: sure. If you want to educate people who plan on building VC-funded companies, you're right. It's a good idea not to delude them into thinking they can take a few $MM and grow organically. They should probably follow most of the Paul Graham playbook.

But more companies should reflect about whether they want to take a few $MM to begin with. Many people would be happier if they didn't. A lot --- most, in fact --- of the companies who do take the money have fooled themselves, and are frittering away the single most valuable resource they have (their time) on companies that have less than a crap-shot chance at success. Craps works extremely well for investors. It's not so great for founders.
Yes, but that's what I was getting at. From a tape-out perspective it costs more to have a second run w/ no-GPU vs a power gated GPU all in one die(which is also why PoP memory exists).

The IP is locked out because there's an extra cost to the business to use it.

Also embedded/mobile GPUs haven't been around nearly as long as OpenGL ES. Heck the Adreno 2xx which was one of the first real-ish GPUs was released in 2009 and even then you'd be lucky to get any sort of reasonable fill rate out of it. These type of GPUs really haven't come into their own until the last 3-4 years.
I realize you asked about work machines supplied by your employer, but I'm going to answer for personal machines anyway.

My home desktop is a 2009 Mac Pro. I also have a personally owned 2008 Mac Pro that I keep at work. They are both too old now for the new version of OS X, so it looks like they will stay on El Capitan.

At some point, I'll either need something that requires an OS later than El Capitan, or the hardware will die. At that time, I would not be surprised if I moved to something else. A lot will depend on what Apple's desktop lineup is like when the time comes.

I would want to be able to move the SSDs from my current Mac Pros to the new machine(s), and nothing in the current Apple desktop line seems designed to make that easy. I would be reluctant to buy any of the current Mac desktops with the Apple upgrade to SSD because that raises the price too much.

The iMacs are also problematic because of the built-in monitor. I don't want to have to keep a separate monitor for my Windows gaming PC, so prefer a Mac desktop without a monitor so that the Mac and PC can share it. For a while iMacs had a feature where they could be used as a monitor for another computer, but I believe Apple dropped support for that.

I suppose I could use an iMac and use Bootcamp to boot an external disk with Windows for gaming, but I'm also not sure about the iMac from a gaming performance point of view.

Another piece of Apple hardware that may be endangered soon for me is my iPad. I've got a 3rd generation. Like my desktops, it is now too old for the current OS. (And even the last version of iOS Apple released for it had some of its most touted features disabled on iPads as old as mine).

I'm seriously thinking of something in the Surface line when it is time to replace the iPad. That's because I'm getting annoyed at the multitasking performance of the iPad, particular of the browser. I'm tired of being on some big page, like a heavily commented Reddit thread, switching to another app or another tab within Safari, then switching back and having the browser have to reload the page. This is especially annoying if I was writing a comment and switched away to get some information I needed for the comment. I end up having to select-all/copy what I'm working on before switching away, so I can restore it if the page reloads, but then I cannot use copy/paste to copy in whatever it was I switched away to look for!

I believe that Surface is running more of a desktop OS with tablet enhancements than a separate mobile OS like iPad uses, and so I'm hoping that it would multitask more like a desktop system does...and so switching between browser tabs, or between the browser and another app, would not cause browser page reloads. I've yet to look into this in detail, though, to verify this.

My iPhone is great. I see no reason at all to consider switching to something else in the phone department. It's just tablets and desktops where I foresee problems.
Some of us don't need much more than a bed, a bathroom, and a battlestation.
How do you program your way out of a bag? genuinely curious
You have to identify something specific and then look at that specific factor across the entire population of companies.

If you survey all CEO's of the Fortune 500 you might find that they are all workaholics. Do you conclude that being a workaholic will make you a CEO? Of course not. Did you look at how many workaholics there are that don't become CEO? That is survivorship bias.

You also need to look at cause and effect. Is it that you must be a workaholic to become CEO? Or is it that as you climb the ladder you end up working hard and harder because that is a requirement of each position. Maybe being a workaholic is an effect of climbing high.
Hey everyone! I'm the creator of Keygen and would love to answer any questions that you may have about it. I've been developing the API for over 6 months and figured I'd try and gather feedback on the product through a beta before the big launch day. I'd appreciate any feedback at all!
Many SVP/CIOs will not use a product unless there is "someone to call". Even if that choice costs them millions of dollars.
That's not the case on any of the models I've been complaining about (ODROID XU4, Raspberry Pi), nor the PocketCHIP (according to this). They have various solutions available to access the GPU. It's just that the drivers don't/didn't work.

> Heck the Adreno 2xx which was one of the first real-ish GPUs was released in 2009 and even then you'd be lucky to get any sort of reasonable fill rate out of it.

Adreno 200 is one of the worst offenders! There was no excuse for not being able to call glTexSubImage2D() without crashing the driver (for example). Qualcomm had the money to create a working driver; they just didn't.
If it eventually comes out that this works, the medical establishment and the press in the West have a huge amount of social damage to answer for.
Check out Ripple docs. That's just one angle of looking at the situation (using a non-100%-privately-controlled-system) but it should clarify a few basic things.
Why would they change what they're doing if you're both still willing to buy their products?
If they had established flavors before the guidelines were put into place, they will be fine for now - just no new flavors. Unfortunately the hamstringing of innovation will eventually lead to their demise.
Nasa Currently Working on Extra-Orbital Launch Craft [pdf]
It used to be awful. Basically you would get the desktop site without resizing, small text, have to zoom etc. It's not like that now. Haven't seen an app that's any good and you don't need one. Site works well in mobile now.
I've been thinking the same way; the k8s Third Party Resource API really enables some clever solutions.

While most k8s users are (from what I can tell) currently writing YAML config files and loading them by hand (encouraged by tools like Helm and Spread), I think that the k8s apps of the future will be more like the Operator;

1) The 'deploy scripts' are controllers that run in your k8s cluster and dynamically ensure the rest of your code is running, and the primitives that you operate on will be your custom ThirdPartyResources.

2) All of the config for your app is wrapped in a domain-specific k8s object spec; instead of writing a YAML file and uploading it as a raw Deployment, you would create a FooService API object with just the parameters that you actually care about for configuring your service.

Right now it's a pain and a lot of code (>10kloc of Go for the etcd-operator!) but I'm sure that a bunch of that could be abstracted out into a framework that makes it easy to generate/build operators for a variety of application use-cases.

Currently the solutions that build and deploy your code for you in k8s seem to be PaaS replacements (Deis, Openshift), which take a very generic approach to bundling your code. That's probably going to work for common use-cases, but I suspect the more bespoke deployments will need something more like the Operator approach, and I'm looking forward to seeing what tooling evolves in this area.
> But these are healthy men — they're not going to suffer any risks if they get somebody else pregnant.

This assumes that healthy men don't give damn. Which, I don't think is entirely true.
Eh there are reps from the big multinational pharmaceutical companies trolling all over the world for potential drugs, both man-made and natural.

Lack of media coverage doesn't mean no one is paying attention.
The Long Road to the Army’s Next-Gen Combat Vehicle
A few people are a little disgruntled that the government gave all of the information in our security clearance applications/re-ups to China. That's my beef, I'm sure other folks have other things to say.
LittleBits, Luxrobo MODI and Honeycomb Review
It is not clear from the article if the meditation group stopped meditating or not.

The headline conclusion only makes sense if nobody in the novice meditation group meditated after that week.
There's your "feminists" for you.

If the pill had any sort of side effects like what these drugs had, they'd be the leading cause of death for women 20-45. But no, it's "weak willed men". meh.

And even after the study was cancelled due to safety, 75% of the men wanted to continue taking it. I guess its worth personal safety and health versus the risk of having a pregnancy with a woman when you don't want one.
What programming language should you learn first? ʇdıɹɔsɐʌɐɾ :ɹǝʍsuɐ
I already switched. Got a Thinkpad t460s. Has a great screen, 20gb ram, 1tb SSD.

I run Ubuntu and can do just about everything with it. No regrets here.
I don't mean "isomorphic" in that every Rust feature has a corresponding C feature. I mean that you can replicate every runtime C feature in Rust, and vice versa. The advantage of Rust is that you get a lot more safety guarantees and ergonomic features out of the compiler than you would with C.
So perhaps the issue is that they made a good product that never needs replacing. Is 4K recording a large enough draw? What is the saturation of 4K TVs so far? Could all contribute.
The laughable JSON snippet format is enough reason for me not to take VS Code seriously as much as I want to.
For those who want the disabled feature:

Typings auto installer - https://marketplace.visualstudio.com/items?itemName=jvitor83...

I've used this extension for the last 2 months, it works great.
I too have recently moved to the area and I'm hiring a new team. Any Clojure devs in LA?
I am curious -- how does this book "Behind the Arches" compare to another book on McDonald's story: "Grinding it out"?
Get LastPass Everywhere: Multi-Device Access Is Now Free