skysight-inc/HackerNews huggingface dataset:
The history of virtualization has shown us that it is far easier to containerize existing software than rewrite it to support strict isolation. Most OSes (sans macOS) aren't really setup for sandbox-by-default either.

The mainframe industry already went through this years ago. They invented virtualization and leveraged it to transition through major new CPU architectures, complete re-designs of IO stacks, and switching out entire operating systems. None of these are new arguments. Virtualization won then and it will win again.

You could say the entire history of the industry is increasing levels of abstraction; containers and virtualization are just another step along that path.
'It's about a society on its way down. And as it falls, it keeps telling itself: "So far so good... So far so good... So far so good." It's not how you fall that matters. It's how you land.' - La Haine
One thing I forgot to mention, this also depends on project size.

Larger projects, especially corporate- or foundation-backed ones, might have less-technical staff dedicated to the web presence/PR/outreach etc. which might use other communication channels than the developers.

> Then I try X and it blows up in my face because it turns out you only do X under (long list of conditions that no one ever told me and assumed I knew).

You don't necessarily have to know. Some exploration and just asking for pointers is often required.
See the Bell-LaPadula Model:
https://en.wikipedia.org/wiki/Bell–LaPadula_model

Implemented in secure systems like Trusted Solaris:
https://en.wikipedia.org/wiki/Trusted_Solaris
Who are those people? There aren't many of them, in, like, the world.
Code Climate or Codacy are nice too. They collect tools like flake8 and run a server side report kind of like coverage.
I saw a bunch of horror stories on Reddit. I'm definitely off the Mac train currently, so I hope I find an alternative.
He forgot Beersheva! There's a city with a good start-up scene and a little cheaper than Tel Aviv.
Right, I was just about to reply with a similar response to another post. I went to Virginia Tech, lived in Northern VA for a while, and now I'm here in SF and it's like night and day. I did not believe that being here would be such a huge and significant difference, and yet it is. Influential and successful people in tech are so incredibly accessible here. After only a couple months I got to meet VCs, startup founders, CEOs of successful companies, other highly intelligent people in tech doing amazing things and so on. Most importantly, at least for me, there's a constant external motivation to push yourself, learn, collaborate, get involved, to do more, and I love it :D
Too late to edit, but that should be:

git checkout -t theirusername/theirbranchname
Hey, I'm one of the cofounders of Nava. We currently are only hiring for on-site roles, as we find physical presence to be essential for much of our work. However, we have a flexible work policy that in practice shakes out to many people working from home around one day/week.
I see I haven't replied yet to your first point: here goes. Of course clearly an alternative has to be at least cryptographically secure. I fully agree with you on that. I'm not recommending something that isn't, and certainly am not recommending Telegram or Cryptocat.

An alternative needs to be as a bare minimum cryptographically secure. And then on top of that it would be very nice if there was federation, not tied to phone numbers and all the components being open source. Those last 3 points is where Signal fails currently. Federation is something that moxie tried, didn't work out, now he's basically not in favour of that, the phone number issue is of course well known, and the redphone server component is not open source.
To a first approximation, at least twice the value derived from burning the fossil fuels in the first place. It's always cheaper to not burn it in the first place.

There is no natural market for "building and selling technology to counter the CO2 emissions" unless one is created by .. treaties.
> But a lot of things about php sucked, at least 10 years ago when I stopped needing to write it.

Sadly you missed out on the major advances that happened in the PHP ecosystem, like properly namespaced code, massive performance gains since PHP 5.3, Composer, modern frameworks, the PSR initiative (even though one might not agree with all their "standards") and so much more.
So I would not judge PHP's evolution by that one proposal ;) A lot more were accepted, implemented and released, from type annotations to the spacechip operator. Personally I'm thankful that nobody further pursued the idea of tainted strings for PHP.
As an example of Docker in production: Expedia are moving lots of their legacy infrastructure into Docker containers. My third-party contracting team that works on projects for Expedia (we're brought in so the rules and bureaucracy don't apply to use, allowing us to rapidly iterate and experiment in ways the core teams can't) have been using Docker end-to-end (local development through to autoscaled production deploys)

While there were teething issues, this article does a good job of pointing out the flaws in the original article, I think. It's been easier to get our team up to speed on Docker and it's gotchas than nearly any other configuration management, server management, et al. systems that we tried!
Sure the leader may have a strong opinion. But most people do, and often about complete BS, which is particularly obvious during election season. So it means nothing. The more important differentiator is the leader is more persuasive in backing the opinion. The nuanced opinion/argument is often more difficult to make persuasive though.
I've been using Linux exclusively for three years now, and I don't see that changing, probably ever.

I'm way more productive on my Linux Mint Cinnamon setup than I am on anything else. And I can make it look beautiful with 5 minutes of tweaking.

I keep an OS X partition on my MacBook Pro, just for the off chance that I might want to do iOS development at some point.
however it has been proven that Alzheimer's is completely unsafe for the brain.
Thanks for stopping by. I too would like to see something more than a "my toys broke - mwaaaah".

I personally find Docker a phenomenal resource for development. For production however, you analyze your use case, the risks, the failure modes etc etc and then you decide whether Docker is a part of that.

I'm by no means a massive Docker user but compared to many of the sub systems running on my laptop it has been very stable for me although I do run Gentoo. Actually my entire laptop is surprisingly stable TBH. I absolutely love the way I run a few short commands and a fully tooled up web app with all the supporting infrastructure simply appears.

Funnily enough, only yesterday I had a look at this: https://nextcloud.com/collaboraonline/ which I found in an article somewhere (LWN?) Yep - love it (NC) so the next step will be to decide how to use it for my home production system (yes I have dev/production at home) For that I will use pretty much the same criteria that I will use for my office and finally my customer systems. In this case Docker for production probably makes sense but I need to analyze it a lot more. A CoreOS VM will probably be spun up very soon in my attic for stage 2 in home production.

I really don't like to see rants along the lines of the other article, denigrating a product that a lot of people have worked hard on, that shows a lack of discipline and clarity of thought. I for one would like to thank you for your work and making it available for all. It has genuinely saved me time and effort and made my IT life a little bit better.

To answer your final question: a thicker skin, mate 8)

Cheers
Jon
Completely agreed. My workplace adopted Docker for local development first, before using it anywhere else. Aside from the "volume mount wiping the `node_modules` folder that was installed in the image but doesn't exist in the host on first boot" problem, it's been an absolute dream.

We had some issues with docker-compose for our use-cases, such as persistent database even when recreating every container from scratch, so I hacked on some stuff that become "dup" [0] (nee. docker-up)

Ps. it's written in Nim, which was a lot of fun!

[0] https://github.com/girvo/dup
the ID service in Matrix is optional, and should be called an 'ID mapping service', really. All it does is to map 3rd party IDs such as email addresses to decentralised matrix IDs. Currently it is a logically centralised service, and this is a major shortcoming: in future we intend to decentralise it as much as possible. This is Hard however, and we're kinda hoping that a decentralised equivalent to Keybase will come along and do the work for us :) Until then, you don't have to use the existing centralised thing if you don't like it :)
Ask HN: You've got one month, what's your challenge?
As simple as that, you have a month, what challenge do you tackle?

Typical examples:
- write a book
- code a game
- train to run a marathon by the end of the month
To be fair here: It's on both parties to be mature about this interaction.

It is the responsibility of the developers of the project to be responsive though.

I would just like to add that many open source projects you are looking at are funded

by companies with salaried developers (all of the ones you listed are).

These companies have customers that come first.

Their has to be due diligence on what goes in to the code base.

If you are ready to submit a pull request to a project and the developers are receptive

to teaching then view it as a learning experience.

Try to understand both sides though.
Where I come from, it does!
Show HN: ptth – A simple http client with middleware for the browser
Okay, I kinda get where you're coming from now. But .. for a good number of 'life is on the line' scenarios leaking a random anonymous phone number (prepaid, whatever) and the arguably best encryption for instant messaging today might be a Good Idea™.

Yes, you (and I, let's not forget that we kinda agree that this is bad design) might not want to share your private phone number just to contact someone via Signal. But I feel you're painting this a bit too black or white.

If lives are at stake or not, Signal might or might not be the right solution. If people feel that their life is at risk, I hope they know how to evaluate the trade-offs - or have someone around that can explain it.

We both don't like Signal. I don't agree that it should be dismissed and emotional appeals are ~questionable~, can probably be turned around (see first paragraph). Individual decisions need to be made and if Signal is a good fit or not for a specific scenario isn't an good indicator about the general fitness of Signal in general imo.
grr...

"A century and a half ago, time zones didn’t exist."

Sure. How old are the concepts of noon? Midnight? The transition to railroad time and time zones wasn't from a single time zone to many, but from incredibly local time zones (what time is noon in this town?) to fewer.

Likely a lack of imagination or caffeination on my part, but it's hard for me to imagine what it would be like to have shops open at, say 22:00. And we still need to take into account differences across the world for coordinating with people. It's not like we're going to change our diurnal habits just because it's, say, 14:00 across the world at the same time.

Wow. This is one of the most caustic comments I've left on HN. Someone back me off of the ledge. Off to read the Cato Institute commentary linked to in the article.

(And you kids! Get off my lawn!)
Yes, but there have been many other protests that did NOT end in violence.
PIC 12F675 Microcontroller Tutorial
How is this scarier than news companies getting into elections, or any of the normal donations of vast amounts of money by businesses for lobbying?
Dynamix's computer game Sid and Al's Incredible Toons [1] [2] is a wonderful cartoon-physics based game, the sequel to The Incredible Machine [3] [4], a Rube-Goldbergesque game like Mouse Trap [3].

[1] https://en.wikipedia.org/wiki/Sid_%26_Al%27s_Incredible_Toon...

[2] https://www.youtube.com/watch?v=C-7LgrEUOL4

[3] https://en.wikipedia.org/wiki/The_Incredible_Machine_(series...

[4] https://www.youtube.com/watch?v=dl1LvFDgCio

[5] https://en.wikipedia.org/wiki/Mouse_Trap_(game)
The lack of a native 1Password client is one of the last major pain points I live with day to day in Linux.

Those Python utilities actually look really useful but as far as I can tell, they only interface with the older .agilekeychain version of the 1Password vault. I've been looking for something similar that understands the newer .opvault format but am yet to find anything that just works.
Sometimes things actually get worse though
One of the more intriguing things in this work is that they used a physical process. This makes it much more likely to work across in other animals/humans.
> "try!" has a built-in, hidden function return.

Hence the reason I said that it abstracts control flow.

> It's only useful if the appropriate error action is to immediately bail out of the function.

Which is exceptionally common.

> It implies that your program should be structured as functions which either succeed or fail, and that you don't need to log or display errors where they occur.

None of this is true, and I do log errors when they occur in Rust programs. (See ripgrep.)

`try!` is a convenience. Since errors are plain old values like anything else, you don't actually need to use it if it doesn't fit.
The only one I knew of was Sequel Pro. But JetBrains' DataGrip now fills that void.
What I learned from President Obama
Don't US parties routinely give lifts to people to the polls? They do in the UK.

(They're not allowed to pay transport costs, but they are allowed to organise transport)
Extremely valuable. Most of the traffic on the web is video. Youtube / NetFlix / torrents / porn.

H265/HEVC lets you halve the traffic while keeping the quality the same. That's a big deal.
On 1:1s
Yeah, so it clearly can't solve everything, hence "mitigate" instead of e.g. "completely solve". In any case, I'd argue that 90% of the time it's better than doing nothing at all.
Man, 64GB of RAM For $229. I remember buying 8MB for more than that...
I love things like this, and I always appreciate the people who take the time to write them up and explain them.

It can take significantly more time to articulate how an algorithm works, break it down, and supply concise code for them than it takes to get them working in the first place. Reading code is great and all, but having someone take the time to walk you through it is fantastic.
What's old is new again, it seems.
A) 'Metadata = sophistry' is totally false. Metadata can never capture thoughts, statements, intentions, motivations, etc.. It captures who at number/email ABC has communicated with number/email XYZ. That's a huge distinction.

In fact - the address and return address you put on your parcels is fundamentally different from the contents.

Moreover - the argument fails to grasp the materiality of the situation - public good vs. private profit. There's 100x more sensitivity over entities operating in the public good, than there are corporations like Google who do in fact 'read all your emails' - and use that information purely for their own gain and profit.

B) 'There is no oversight' - this is again, false. There is a lot oversight - legal, administrative, operational - every step of the way there are checks and balances either external or internal. Do we have the type of public oversight we want - maybe, maybe not. There is definitely public oversight of CSIS: it's called the 'Security Intelligence Review Committee'. But it's wrong to suggest there is 'no oversight'.
it does seem that if time zones didn't exist someone would have to invent them, just to make remote work feasible if nothing else.
Let's analyze the units in this article.

We have: (1) miles, (2) a paragraph about JPL's consistent use of the metric system, (3) several paragraphs translating JPL's data into feet, pounds, feet-per-minute, mph, Fahrenheit, pound-feet, and inches.

Madness, I tell you.
That seems to be the secret of good proc-gen game design. Curate the good randomness.
1) Hosing the registry is not the big issue. The issue is that distributed config with centralised UI >> centralised config. On OSX, if I want to reset an App to factory I delete a .plist and maybe an application support folder (always in the same place). I never had to reinstall a single application in 11 years of using OSX. Moving to a different mac? Migration support just does a file based copy of your apps, plist files and support folders and everything is exactly the same as bevore. Want to copy an app without config? Just copy the .app file. These are all things that registry + complex program folders with write access make impossible.
Tainting is best used for detecting cases where the string in question is both dangerous (e.g. being `eval`ed) and derived from external inputs.

I remember being scolded while working my first "real" programming job becaused I used `eval` in a Ruby on Rails codebase (I don't remember the specifics; I think I was trying to hack something together because the controller setup was weird and I was struggling with the "Rails Way™"). Using a quick `eval` to generate the intended code on-the-fly seemed reasonable to me, having previously been intimiately familiar with Perl (where the dangers of `eval` are mostly mitigated thanks to tainting).

I subsequently learned to embrace Ruby's more robust metaprogramming facilities, and have since come to appreciate the value (and danger) of macros in languages like Lisp and Elixir, but I still found it interesting that features like tainting aren't more widespread (or if they are, they're not advertised very well).
True, they are rare. On another unrelated project I'm working together with Bill Binney, the cryptographer who wrote ThinThread at NSA. That's all I can currently say about it.
On Nov. 14 the Moon Will Be the Biggest and Brightest It’s Been in 70 Years
Works on all Macs (tried on MacBook Air and Pro), the problem is convincing Windows to install on the external drive. If you have a Windows Pro license you could use Windows to Go and install it on an external drive.
No, I don't have a beef with Signal. I have no familiarity with the product. I am a woman and violence is often directed at women merely because they are women, regardless of what part of the world a woman lives in. I am also someone whose father spent 26.5 years in the Army and he fought in two wars and my ex husband was career military and ...etc. My parents also helped relatives of my mother's escape East Germany during the Cold War.

While you may hope that they know how to evaluate the trade-offs or have someone around that can explain it, many people live life under very risky circumstances and an uninformed choice can be the last choice they make.

No, I am not painting this a bit too black and white. Alive or dead is a pretty black or white thing and many people live lives where death dogs their steps. This is not an appeal to emotion or hyperbole. This is a fact.

If it isn't that big of a deal for you, cool. Glad to hear your life is fairly comfortable. But I do think it matters that informed, knowledgeable people discussing it on a forum with a strong reputation for being a good source of technical information (as well as other kinds of information) is a place where someone needs to make it very clear what the potential consequences are for people who live in dangerous circumstances and don't have the technical background or connections needed to figure this out.
One of the best puzzle games of all time
>INSTEAD OF AUSTIN, TEXAS, TRY HUNTSVILLE, ALA.

Yes please
The Canadian equivalent was in North Bay Ontario. I worked there briefly in the '90s. It was an interesting experience. I remember the guards and the bus ride to the bottom always made me nervous.

https://legionmagazine.com/en/2014/11/the-brotherhood-of-und...

https://m.youtube.com/watch?autoplay=1&v=HRvPPnHMsyE
There can't be two containers running that listen on the same port. The rolling upgrade will need to kill the first container to start the new one.

I may suppose that you talk about [CPU] load, because you are running computations/processing applications and not webservices.
The title and the content are wildly divergent...
They never provided CPU emulation for that.

Their solution for Mac LC was effectively an Apple IIe shrunk down to a PDS expansion card.
> It sounds like, aside from the democratic confederations thing, what eli_gottlieb wants is not a different system of rules, but rather to kick the existing system into a different equlibrium. (It really seems like these socialist types tend not to distinguish between these...)

Well, I'd love to know where you draw the conceptual boundaries between systems. Lemme guess: it's only not-capitalism when the state controls everything?
This isn't really a mac problem though. Brexit sank the pound. Others will start correcting their prices too (if they haven't already)
Not a chance in hell Adobe is going to do that. It'd increase their costs and the complexity of releases, and all for a platform with 1.x% share and with a culture of not paying for softare
I think it depends on the project like mentioned.

For react, the docs for the website is in the same repo as the main code under "docs/" https://github.com/facebook/react/tree/master/docs.

A lot of projects do what we do with babel: have a separate repo with the whole username.github.io name: https://github.com/babel/babel.github.io.

And a lot of projects started adding links to edit the page you are currently on: http://babeljs.io/docs/learn-es2015/ (see the "edit this page" link on the header. For yarn it's on the bottom: https://yarnpkg.com/en/docs/. That at least makes it easy to edit a specific page for typos etc. Then you can just edit it from the website
Foxpro! http://e.lvme.me/kdzw08x.jpg