skysight-inc/HackerNews huggingface dataset:
Docker definitely doesn't follow least privilege. If it were least privilege, then the Docker daemon WOULDN'T EVEN EXIST.

For example, Chrome's sandboxing tool (minijail I think) and systemd-nspawn are NOT DAEMONS. They just set the process state and exec().

Docker is sloppy as hell from a security perspective. It is indeed embarrassing that they mention it in this paper.

Docker has also enshrined the dubious practice of dumping an entire Linux image into a container, and then installing a bunch of packages from the network on top of that.

And now you need a "container security service" as mentioned in the article. How about you just understand what your application depends on, rather than throwing the whole OS plus an overestimation of dependencies in there?
Huh? Is this a joke? Please provide the relevant /sarcasm or emojis because you can't be serious, right?
It does seem the business requirement for real-time is often ignored in "offline first" write-ups. If the current, up-to-the-second status of a server is being monitored, if vital signs for a patient are being monitored, etc., an app only delivers value if it provides the "now"/real-time data. Some form of websocket calls will be used, not Ajax. Showing something from the past because the data was stored locally is not helpful in assessing the current, real-time condition. There may be some things you can do to cater to the condition of being offline, but the point remains this app delivers almost zero business value while offline.
If you just want to beat it over the head with a stick, you can simply turn indexing off on a per-volume basis:

sudo mdutil -i off /

You can also exclude certain directories or volumes in the Privacy section of Spotlight preferences.
Ask HN: Best examples of self-contained React/Redux component
I am looking for good examples of React/Redux based self-contained components.
Conflicts are actually not all that difficult to solve. We had to solve this exact problem with a time entry solution that needed to be mostly available offline.

Taking most of our inspiration from Git, it was simple. Define the atomic unit of conflict, and the definition of a conflict that cannot be automatically resolved, and simply help the end user understand and resolve the conflict.

95% of cases were fairly easy to merge without interaction, once we had defined "conflict." And the remaining 5% just required a little extra user experience design to help surface the appropriate resolution.
If they block Google.com sure, it won't work, but in that case Signal could just use a CDN they won't block, like Alicloud in China, or AWS or similar.
> Sorry, but you're wrong about iOS not supporting security fixes, and you're having to create an artificial situation to justify your argument: the situation where a user doesn't stay updated to the latest iOS, when in fact, the user has every motivation to do so.

Read, comprehend, and then post.

I said the current iOS version. The latest iOS versions vastly decrease the performance, especially on the older iPhones. So the user has a choice:

* No security updates.

* The latest and the greatest with decreased performance.

Have fun with your insecure or slow iPhone. (The same applies for iPad.)

> Meanwhile, in your Android world, there are basically NO devices that are able to stay fully up-to-date with current Android for more than about 12-18 months.

Yes, with security updates, there are and its improving as well. Any Google Pixel. The Fairphone 2. Samsung Galaxy S series. And many others.

You carefully worded "stay fully up-to-date with current Android"; that is irrelevant. I don't give a shit about this hipster hype of needing the latest features. All I want is a phone which keeps working, and remains secure.

> iPhones are just as easy to replace the battery and screen in as any modern Android device; in addition, Apple provides screen and battery replacements.

Like I said, with my phone I just replace the screen or battery myself. Without even needing a (special) screwdriver.

Repairing iPhone screen is very expensive. I see youth all the time running around with their broken iPhone screens. I've never heard of someone going to an Apple store to replace their battery?

I have zero interest in Apple's locked down iDevices, and I want the MBP to stay away from that world. Unfortunately for me (and the many others who agree) it is exactly where macOS and the Macbooks are heading towards.

> Did I mention that Apple's warranty and warranty support are also vastly superior? Because they are. Especially with AppleCare, but even without.

AppleCare = anti harassment tax. Completely pointless. You have the same rights already from EU law, but you may have to enforce them via a lawsuit if they don't oblige.

Besides that, I had AppleCare with my MBP 2010 and they claim that their design flaw didn't fall under it. Fool me once, ...
Talking about whether it will be a success is changing the topic.

Downplaying the article just because you haven't heard of the group yourself is not interesting.

That's why you get downvotes.

And sure, it probably will be a success, in large part because this seems to be a fixable software problem.
Every time I read about the Anthropic principle I get the feeling I'm missing something. Enthusiasts of the principle seem to be committing a fallacy; perhaps someone can explain why they're not, or why they are. I compare the principle to this. A group of friends get together and decide they'll roll a d20 to decide how to spend the evening. There are various options afoot, but they decide that only if they roll a 20 will they play board games that night. Lo and behold, they roll a 20 and spend the evening playing board games. Later someone says, "How lucky we are to be playing board games!" A skeptic says, "Whatever do you mean by 'lucky'?" Reply: "Well, there was a 1 in 20 chance, and we hit it! That's pretty lucky." The Anthropicist snorts and says, "Hardly! We're not lucky at all. There was a 100% chance. After all, we're playing them." Is that a good analogy? Or does it miss something crucial on one side of the argument or the other?
I think the idea of using micro services is that lessens the surface area of what you need to harden. In other words, it's easier to harden a simple service that just does one or a few things versus hardening a complex monolithic application.

I'd liken it to OOP encapsulation or the idea behind linux executables.
Thanks for the perspective -- I would have guessed exactly the opposite, using the logic that many Asian societies have highly formal and even ritualized notions of hierarchy and authority, and that asking "why" in such a place could be tantamount to questioning that authority. But maybe it's different when everyone is at the same spot in the hierarchy.
Ask HN: How much do you sleep?
This a bit off topic for HN, but I would like to know your sleep patterns, and what you do to get great sleep.
Could the problem with the battery life be that Apple has the same power management issues for the Skylake processor (which is used on recent MacBook Pros) under OS X that plagued Microsoft for its Surface Book and Surface Pro 4 and also causes/caused trouble under Linux (https://mjg59.dreamwidth.org/41713.html)?

BTW: Is this problem finally fixed under Linux?
The fee structure is very simple and transparent. Customers didn't get tricked or legally trapped, they just didn't consider what happens if the fund loses money.
>I'm kind of leery of doing something that would cause me to develop problematic muscle memory when typing on normal keyboards, e.g. on other people's machines.

Who here routinely does a lot of work on other peoples' machines?

Honest question, because I keep hearing this claim re: remapping keys, but I rarely see people working on not their machine in the wild.
Good.

The error of the MacBook Pro is the 'Pro' part. It's supposedly being marketed to professionals, but optimizing for one thing only, which is thinness. I don't think anyone ever asked for the "old" MacBook Pro to be thinner. Maybe a beefier CPU, maybe a GPU worth something, maybe more battery life. Or more ports. But thinner? They used to have a very good product for that, and that's the Air, which is now neglected.

Apple's product lineup is a mess. Like the time after Steve got kicked out.

Disclaimer: typing this on a 2015 15" MacBook Pro.
I don't believe economic collapse will yield a better society. If we can get from the consumeristic society we have now to a much less consumeristic one without the economic collapse, perhaps.
This is the internet I know and love. Pure content created by someone loving what they are doing. No bullshit blingbling, no ads, no tracking, just sharing experiences and knowledge. Wonderful and inspiring!
>$3000/person is around or larger than the world's median individual annual income

But we're not talking about the world, we're talking about spreading it over the citizens of California in particular, which have one of the highest incomes in the world.

If you want to talk about it in the scope the entire world, divide their wealth by 7 billion instead of 40 million to see what it gets everyone. Also, almost nobody in the US is for taxing the rich in the US to just give to citizens of other countries.
Mine works fine. I love it.
Sticking their heads in the sand is part of the reason Democrats are losing ground.
This was a bit painful to use:

http://reaxml.realestate.com.au/docs/reaxml1-xml-format.html

Its an xml format for uploading property listings. Came with a dtd but was hard to really fathom out which combinations are valid.
French grocery store trolling Amazon Go
something unprecedented in U.S. history

Hardly. For 10 such examples, see:

http://thefederalist.com/2016/02/16/10-times-democrats-vowed...
There is some beauty in the progression of the shapes. Something that feels organic and mechanic at the same time.
We've been able to hire and leverage our existing Ruby developers to support our Elixir apps with success. It usually takes a couple of weeks of getting aquatinted when starting from scratch, but after that, execution increases linearly until it levels off at the developers' baseline.
Had a chance to have a 1:1 with Leo a few years back. We chatted mostly about technical topics around building analytics platforms in-house with limited resources. He offered really good advice and was extremely generous with his time. Even if you just need a sounding board, I recommend that you take him up on this offer.
Ehhhhh... What? All my NYC friends are below average in income. None are software engineers and of course they all rent. Their housing costs are probably a very significant part of their income as well, but I've seen a lot of higher income people do the same with McMansions. A few ended up moving to Brooklyn too for cheaper rent.

I don't live in the NY metro area but I visit several times a year since I got friends there. I always crash on the couch.

I vary rarely socialize with people with high income because, one, I grew up poor so most of my childhood friends are still below average in income but more importantly I find it very difficult to relate to people who grew up well off. Sometimes I hear my co-workers talk and I feel I am living on a different planet.

As far as shared housing, yes, 99% of college kids live in shared housing and the vast majority of them still socialize.
"Hold them in place" is a bit misleading. The molecules in most nanocages generally still react with the nanocage through specifically designed binding sites that actually hold it in place. This means a nanocage is hard to design for nontrivial molecules like folded proteins and it's usually not a perfect cage that completely envelops the target. A lot of stuff is still bound to react with the nanocage and the material inside until it can reach its destination and the cage unfolds.
I think that there's another element to some of the automated content channels like "Toys in Japan". They make content based on comments on other videos, was hacked according to Goodwin's Law. (https://www.youtube.com/watch?v=3OoU2ck2RiY)

My pet theory is that these channels are monetized for automated click farms and they use children's content partly because kids will watch it, obfuscating the bot-clicks, and more-so that they can increase the safe threshold of bot-clicks/bot-views since children's viewing habits are to watch the same video repeatedly.
Ask HN: Good examples of a React/Redux SPA with user inputs
I am building a React/Redux based SPA app that has a user input chooser (e.g. user specifies zip code, date, etc.) that triggers several independent visual components to update.

Looking for good examples that demonstrates best practices for building such an application.
It's only for citizens in California in my calculation, which already make much more than that on average. So it would hardly change anything.
There's a lot more involved than simply economics. A stroll through various neighborhoods in Detroit would be enlightening.
https://news.ycombinator.com/item?id=13243187
Refusing to vote on a Supreme Court nomination is not only not unprecedented in U.S. history, its not even rare. A couple of W's nominations didn't go anywhere.

http://www.senate.gov/pagelayout/reference/nominations/Nomin...
>> Besides that, I had AppleCare with my MBP 2010 and they claim that their design flaw didn't fall under it. Fool me once, ...

I feel for you. A lot of people who had the defective Early 2011 15" MBPs with discrete GPU issues (also a defectivd design, imo) also had mixed outcomes when dealing with Apple. Mine bricked right after my AppleCare lapsed (had logic board replaced once under applecare, only took 2 months for problem to recur because of its defective design). I ended up buying a PC laptop. A few months later, Apple issued the repair order/recall. I was lucky I didn't recycle it or sell it for parts before the order was issued.
I wrote a science fiction novel about an asteroid crashing into Earth, and did some extensive research on the topic (including how large an asteroid has to be to cause worldwide damage).

Regarding global unity, my book takes the opposite stance. In it, futuristic superpowers U.S and China squabble about who should do what, and global politics destroys any chance of stopping the asteroid in time. Of course, there's much more to the story, and there wouldn't be much of a plot if there was 'global unity' :)
It would be essentially cash for clunkers, which wasn't an enormous economic stimulus.
I have updated the question to include that clarification. If one reads through the RFC library and recent papers on networking protocols and design, especially when hardware is included in the mix, the possibilities begin to emerge.
> Who cares about ancestors?

Almost everyone.
I get a sense that the idea behind the anthropic principle is that the subjective experience is antecedent to objective reality, perhaps similar to solipsism or panpsychism.
YouTube is similar to MTV in the 80s in terms of appeal and sophistication. Thats why anybody who is big there will not be considered a "real" celeb by people who dont have a clue. But dont be surprised when you see the channel DisneyCarToys advertising the new Disney movie (they already do). The amount of influence these channels have is inmense. Most people dont get it (including so called smart business people). Media as we know it will not exist in 5 years.
https://news.ycombinator.com/item?id=13240409
I'm so sick of exactly this. I can deal with a few tradeoffs for thin-ness, with the idea that maybe it's Good For Me indirectly by moving the industry to adapt to a thinner, more mobile vision.

But compromising on literally everything else about the computer just to get a bit thinner (worse keyboard, smaller battery, worse graphics, less memory -- things I actually care about) is infuriating.
Currently, no. But I've implemented an (ISO-)Prolog engine (twice, even). Tragedy is, there are more Prolog engines than Prolog programs, just as there are more web frameworks than web apps ¯\_(ツ)_/¯
At the very least, most elevators emit a beep when they pass each floor. This might not be true of faster moving elevators - I don't know.
Tribalism in politics. A strange game. The only winning move is not to play.
People who agree don't post. It's why online communities tend towards contrarian, which tends towards crackpot.
Yeah, Google will survive this just fine. Signal users and activists are a higher priority than the risk to Google, since the risks in UAE aren't terribly high for them.

Blocking Google would make Dubai really look like a red headed step child, since they are trying to appeal to an international audience to do business and live in their country. Porn they are able to get away with blocking, but basic tools for business is unlikely to get blocked, especially since their competitors (Yandex & Baidu) are not popular there.
> The new rules only involve decryption of the precise positioning signals, steerable antennas designed to avoid jamming, and GPS designed as missile guidance technology (ability to deliver 500kg payload at least 300km).

Now I want to publish all of that info in a book and distribute it world wide, a la PGP Philip Zimmerman style. ITAR...Pssssha!
Correct. Sorry for the ambiguity.
Gonna be hilarious watching this company go down in flames. Unfortunately it is sure to burn a hole in the 401ks of America during the process.
Yeah I just noticed (see my other comment). But I still think the paper is weirdly unbalanced and divorced from the realities of software development.

I think current events show the urgency around cybersecurity in the government. But it sounds more research-oriented, whereas I would expect it to be more about accelerating current practice (and also debunking technologies like Docker, which are sloppy with regard to security).

Maybe I'm misunderstanding the purpose of this paper though.
> "Hard work will reliably get you to the 99th percentile only in a world where only 1% of people work hard."

Yes, and that's exactly the world we live in today. Most people don't work hard enough in their teenage-years/20s to become high paying doctors/lawyers/bankers.
Leaders? No. But many people do.
>The whole "demonetization" argument seemed blatantly propagandistic to me. The stated goal was to repatriate "black money" (theoretically large untaxed cash reserves held by rich Indians). Let's assume that "black money" is a real problem and not an overstated political bogeyman.

It is a very real thing, as every Indian knows and hears and sees (from generations past, probably even before independence. Hey, it even plays a part in Indian movies).

Please don't make assumptions. Check out the facts on the ground, preferably by coming to India and spending some time here, before talking about it. I see from your profile that you are scientific, but you are not really exhibiting that here.

>Let's ignore the fact that the last thing anyone with serious money is going to store wealth in is cash (especially not Rupees).

Maybe you are not from India (sounds like it) and don't understand the fact that infrastructure and conditioning and people's minds can vary a hell of a lot across countries (not even to start mentioning the differences between more and less developed countries). There have been reported (and exposed) labyrinthine schemes for evading tax and so on out here, maybe more than you can wrap your brain around (without knowing more).

Edit: to make it clear, I am not saying that the scheme is perfect. By reports in the papers as well as by my own experience, it has led to many issues. It could and should have been planned and handled better.
Please do not do anything other then 100% black text on 100% white background or reverse. Any style-arguments you have are defeated by sheer readability and usability.
Well, it's not really something I consider as my primary activity, but I do like to spend an hour or two on it every second day.

It's a simple way to learn something new without the need of getting too involved with the material.

(For example, Geography Now! [0]has taught me a lot of things about other countries that I would never know about and it only requires like 15 minutes of my effort once per week.)

I consider it a nice way to lose some time when I'm not trying to focus on something.

On the other hand, I haven't watched a movie in months.

Unfortunately, YouTube's recommendations really don't do a lot in helping me discovering new things. I find myself putting in a lot more effort in finding what I would actually enjoy than I would have hoped to have with everything Google knows about me.

0 - https://www.youtube.com/channel/UCmmPgObSUPw1HL2lq6H4ffA
Thank you, that is a very intuitive explanation.

You've probably read Scott Aaronson's Why Philosophers Should Care About Computational Complexity? [0]. This seems like the perfect area to apply a lot of the questions he brings up. That's what I was looking for as I skimmed through the paper. Maybe that's what idlewords was talking about as well.

[0] http://www.scottaaronson.com/papers/philos.pdf
Do these ITAR restrictions only apply to GPS, or also GLONASS / Galileo etc.?
Steve Forbes wrote about the lack of planning and impact on ordinary citizens: http://www.forbes.com/sites/steveforbes/2016/12/22/what-indi...
No. I unfriended people because I got sick of reading conspiracy theories like Sandy Hook was a government conspiracy to take away guns, that Obama was a secret gay Muslim, that Michelle Obama was really a man and that their children weren't really theirs.

Let's not forget the investigation by Chuck Norris that the government was secretly trying to declare martial law in Texas, "proof" of a 6000 year old Earth, and that Noah's ark was found.

And then news that people are using welfare to by weed in Colorado and that parts of Minnesota are under Sharia law....

If "sticking my head in the sand" means ignoring the looneys on the right that believe everything they read, guilty as charged.
I'd have thought there'd be more to this, no?

Because look. I don't know anything about crypto so I can't evaluate either by myself. So my only criterion to decide which is better is to ask which one has been more thoroughly tested which is obviously GPG. So I would imagine TC would have a hard time convincing non-experts that they're an improvement...
Consumption and Cash-Flow Taxes in an International Setting [pdf]
The term “creator” as applied to authors implicitly compares them to a deity (“the creator”). The term is used by publishers to elevate authors' moral standing above that of ordinary people in order to justify giving them increased copyright power, which the publishers can then exercise in their name. We recommend saying “author” instead.

https://www.gnu.org/philosophy/words-to-avoid.en.html#Creato...
> In addition to being UB,

Yes, its UB. But I'm not persuade you to use this UB in real code: in real C code use offsetof from stddef.h. The only thing I want to say is: this code would work everywhere (if you pay attention to alignment). And its not coincidence by some chance: C mimics asm, because C needs to be 100% predictable to coder. Because asm use simpliest and the most obvious abstractions, with predictable runtime costs. C also goes this way. So its inevitable for my code to work. With some precautions, but it would work everywhere.

> the example doesn't illustrate the issue...

Yes, I suggested it, and I asked you for some illustrative example, because I can't understand your reasoning from "arrays are not first class" to "nothing to do with asm". I see it other way: "arrays are not first class" is "asm mode".
wholly agreed. If going offline first fits the use case of your app, then go for it. But there are so many "X-first" approaches (e.g. mobile first) that you can't (and shouldn't) over engineer for them from the start.