skysight-inc/HackerNews huggingface dataset:
Note that my point wasn't about how "your process" can be non-isolated in certain ways using capabilities, such that you could, in theory, sandbox both of those processes individually and have them still do whatever IPC you want; yes, this is certainly possible, and obviously more sensible if one of those processes isn't so much "your" process as it is some other process managed by some other party that you're interacting with.

My point was more about the "developer UX" of needing to isolate things that way. Containers have the semantics of isolating a group of processes, but not performing any internal isolation between the processes in the container. This is almost always what you want—you want "your app" to be able to have multiple processes, and to not have any security boundary between the parts of "your app", just between "your app" and "other apps" or the OS. In other words, you want to have a single "process"—from the OS security subsystem's perspective—whose threads happens to be composed of multiple PIDs, multiple binaries, and multiple virtual-memory mappings. You want to fork(2) + exec(2) without creating a new security context in the process.

Sandboxing would make perfect sense if single processes were always the granularity that "apps" existed at. Sometimes they are. Sometimes they're not, and people do complex things with IPC-capability-objects. And sometimes, when they're not, that fact pushes people toward avoiding multi-process architectures in favor of monolithic apps that reimplement functionality that already exists in some other program in themselves, in order to bring that functionality into their platform/runtime so it can live in their process.

Containers let people avoid this decision, by just applying things like capabilities at the container level, rather than at the process level.

> If someone can explain to me how isolating the system services in docker containers (which by the way are not isolated since they are privileged) does anything above and beyond what capabilities and the security features in OpenBSD provide then I'll concede the point.

Completely apart from the above, my understanding of Rancher is that it's the Docker part of "Docker container", not the container part, that provides the benefit there. Docker is a packaging and service-management system; that its packages use containers is frequently beside the point. Rancher's system services are Docker images (i.e. Docker "packages"), and so you use Docker tooling to create, distribute, manage and upgrade them. If your own application on such a system is managed through Docker, this provides a neat solution to unifying your operations—you just do everything through the docker(1) command.
UGH! unscrollable page!
No, in my estimation I was being conservative and it is probably much higher though.

Edit:
It is much easier to break things you don't understand than fix them.
Do you actually have real questions about the words I typed, or are you just trying to shame me into something?

Because, reading comprehension is fundamental. You might want to watch a Youtube video about it....
> And specifically, no good Mobile clients.

I use JuiceSSH [0] on Android, which is based around mosh-client. It works great... What precisely do you mean by the above?

[0] https://juicessh.com/
If you make claims, and you can't prove them, you're lying.
You have a really odd idea of how journalism functions.
There's also https://www.voltstats.net/
Some people may prefer to have a few real, very close friends than 100 "friends" that they never talk to. Some people also like to go to events to just be out and about and not at home. I don't feel weird eating dinner or going to a movie alone. I'm there for me and am not out to "make new friends".

It is a little like co-working space. Yeah, I could work at home but there is a lot more energy being at a location full of people being busy even if they aren't my "friends".
I don't know if you want to try building up an immunity to Lyme disease.
But native scroll is native. There's no way for mosh, a program running inside the terminal, to know when a user is trying to scroll, and fetch data then.

If you want non-native scroll, just nest mosh inside screen/tmux.

(That may actually be why my theory doesn't work: once a line has scrolled off the screen, there's no way to update it, I think. So even if mosh wanted to do background, low-priority sync of scrollback, it couldn't. The only way to update the scrollback is to write the scrollback before writing the current screen.)
A simple neural net in java
Whether or not one goes barefoot (which is the context under discussion) has little bearing on whether one gets Lyme disease or any other tick-borne illness.
How to Control Flow in Ruby Blocks
Browser Isolation Engine
This is not true. Some of the best papers ever, I have benefited from reading many times, more than three.
Bet you're a real hoot at parties.
Ah, yes; it was the manifold that I was looking at and wondering what it was. Thanks for the explanation!
Why do you disable loading in frames? Security?
Maybe if you live in a yoga studio.

Real life has asphalt, sharp bits of metal, thorns, and snow.

Fractures, tetanus, infection, and frostbite aren't optimal either. (Note: this is why footwear is not a recent invention.)
I'm your typical NoScript user from the days of web pages that were faster loading than the links we retrieved them on. I'd normally complain about one of these sites but your science link [re-]loaded seemingly in an instant, looks great, and scrolls well. So, thanks for a better experience than looking at many other demos. :)
I'd like to present a fourth option, the "0-pass":

Don't read most papers. Don't feel bad about not reading them, because in general they are terribly written.

Instead, read follow-on work which resynthesizes the ideas in these papers for a popular audience.
"We traced the glasses to your son from the prescription by examining the files of all optometrists in the San Diego area."

Wow, no wonder government agencies salivate at the idea of being able to monitor the whole Interwebs.

I know they now have orders of magnitude more data to process but still... that manual process must have been expensive and boring as hell.

I guess as an agent you would need to convince yourself that this was actually a very important task of defending your country or something. Otherwise I can imagine going crazy just doing this stuff for nothing...

Edit:

Another quote I found amusing:

"The friendlier one eventually described how much it had cost to investigate another recent case where a person was reported to have pulled down an American flag and stepped on it. Only after the investigation was well under way did they learn that the perpetrator of this nefarious act was only four years old."
am I walking into something here? I am concerned about regional bias. which dialect of English is being spoken?
(2015)

I wonder if any follow up studies have been done by now...
Ah PayPal, all the power of a bank, none of responsibility.
You might instead consider if it is possible to go outside and avoid stepping in human feces (which is how hookworm is transmitted) [1]. Presumably in the American south in the 20th century people were defecating in common outdoor areas.

[1] https://www.cdc.gov/parasites/hookworm/gen_info/faqs.html
The future of Java
Deeplearning4j used for Reinforcement Learning
> A fair amount of the popularity was being the first scripting language with a reasonably complete, cross platform, UI widget toolkit.

That wasn't my experience. At least in tcl/tk 8.5 things like zooming in/out of a tk canvas or updating a progress bar were a real pain.

For example, tk canvas has this nice, seemingly simple subcommand called "scale" that looks like it does exactly what it's called with a tag and two double-precision floats. Apply it and all the relevant tk items are scaled accordingly. It even has a predefined tag called "all" that applies to all current tk canvas items. Trivial. Awesome.

Except text items don't get scaled. And font sizes are limited to integer pixel/point sizes. So zooming is actually non-trivial. Not awesome.

There are a sufficient number of such idiosyncracies that if you want to make a clear, usable interface you end up battling the toolkit.

Also, on the tcl language level I felt the "everything is a string" feature gets in the way. I'd much rather have implicit expressions and explicit string declarations.
We do have plenty of ticks here. I wasn't aware that chiggers carry Lyme, though.

According to purdue, they don't: http://www.purdue.edu/uns/html3month/2001/010716.Gibb.chigge...
PDF here: https://arxiv.org/pdf/1704.06945.pdf
People who bought tickets?
Thanks, this blog post was exactly the sort of discussion I was looking for!

The TL;DR:

- easy to write interactively because there's no fiddling with the parens, quoting, or commas you find in JS, Ruby, or Python

- uses [ and ] for subexpressions instead of ( and ), which makes typing easier

- "command" oriented, instead of "expression" oriented

- saner than shell while having many of the same advantages
People very much play up their reaction when they find something someone else doesn't know. "What?? You don't know Regular Expressions?!" Are they surprised? Yeah, maybe a little. But they exhibit an overacted, exaggerated reaction instead of a natural reaction of just "oh, huh, okay."
And yet, the claims may still be true.

Moral judgement of making unsubstantiable claims is different than proving the claims false.
Simple Bank, in addition to having instant transfer to other Simple members, also mails checks to people. Haven't done it yet, but seems handy.
Dog and cat feces too. Ever seen that on the ground? Also, San Francisco :)

Edit: Also, no, outhouses were the norm in the American south. That doesn't mean their environs were sanitary though, and this was indeed where people picked up hookworm. As far as I know, the only times Americans would/will defecate in the open was on the frontier/in the wilderness, that is, when no other options exist. In spite of the meme that Americans are not so different from some people in rural India who defecate in their own water supply, one of the first things built in a given American frontier settlement was an outhouse, because poop is gross and toxic.
TL;DR

It's possible to predict the location and quantity of 911 calls based on call data (accident time, description of emergency calls and geolocation data) using Regression analysis
Go barefoot inside, put on shoes or sandals outside... Your feet, and your kids feet, will be absolutely fine.
Hasn't Facebook been gravitating towards politically extreme conversation ever since people started posting ideological memes on Newsfeeds and writing comments?
What are you talking about? 10% of my clientele pay in bitcoin. Source: independent sysadmin/automation/'devops' consultant.
Russell and Norvig (1995) include machine learning as one of the four elements needed to pass the Turing Test. They cite Gold's Identification of Language in the Limit from 1967 as a laying the groundwork for machine learning applied to natural language processing.

http://stpk.cs.rtu.lv/sites/all/files/stpk/materiali/mi/arti...

http://web.mit.edu/~6.863/www/spring2009/readings/gold67limi...
On GC, maybe you should let them know.
They seem to be headed down that path: https://github.com/WebAssembly/design/blob/master/GC.md

Oh, and on direct DOM access. You presented a link to an implementation of indirect DOM access. They have an open issue you might find interesting: https://github.com/tcr/rust-webplatform/issues/20
I grew up running around barefoot as a kid in Zambia. We used to play football (soccer) anywhere with no shoes. Didn't matter how rocky the field was. The only time we wore shoes was to go to school.

Occasionally you'd step on a thorn or some broken glass but I can't remember that ever hindering us in any way other than enduring the mirth of your friends at your misfortune.

It's ridiculous now how I can barely make it across my pebbled driveway barefoot without crying out in pain.
Would you please not post like this here? We're trying for better: https://news.ycombinator.com/newsguidelines.html, https://news.ycombinator.com/newswelcome.html.

If an article doesn't merit a substantive comment, it probably doesn't merit any comment.
I want to read a book by the guy.

Amongst other achievements, Les Earnest was an actor, basketball manager and inventor of the search engine.

http://web.stanford.edu/~learnest/les/vita.htm
iOS feels like the new IE when it comes to this stuff.

For example:

> iOS 7 Safari recalculates widths set in vh as vw, and heights set in vw as vh, when orientation changes.

If you really want iOS customers to feel at home, a lot of the time you have no option but to specifically target all their screen sizes with media queries.
RDMSR is an instruction, not a syscall. It's not clear to me either why this needs a kernel module. It's similar to i7z, which from memory does not use it's own kernel module.

eBPF can read the relevant PMCs as of Linux 4.9. eg, the llcstat tool in bcc does this. (It was something I pushed for, and Alexei delivered)
Is that a subtle version of "This sentence is false"?
Just subscribed. 14$ a year seems way too cheap, but maybe they've run some numbers on it
Is it practical? As far as I know, unless they're citizens, the countries of such coasts aren't obligated to accept them. And it's often not clear where they're actually from. Plus, what if they're from a war zone?
https://americanhumanist.org/
Disabling embedding in frames is the default on Rails now, so that feature would have to be specifically disabled to use with this tool.
"This is insanely wordy. I would appreciate a TL;DR;"

Start here: "How to Read a Paper" ~ https://news.ycombinator.com/item?id=14228912

Is it that hard to read the title and the first 100 words. In papers this is usually the abstract. If you can't find the meaning inside the first one hundred or so words it is waffle and may not be worth reading.

Here is a hint. Network neutrality, enshrined in law, is under attack by large ISP companies for control and profit. There are precedents in our technology history. Tech companies are not run by benevolent skivvied, sandal wearing hippies, who hang around the Dalai Lama in their spare time to be enlightened. If you disagree with my editorialising, that's what happens if you ask someone else to re-interpret the story. Read the entire article instead.
> However about twelve years later I learned by chance that putting slightly provocative information on a security clearance form can greatly speed up the clearance process.

I remember reading this decades ago and wondering what this might be. Now he's explained it! I'm glad I looked at this again.
Does that include pressure apply by teachers?
Actually, Lennart proposed some years ago exactly how you could "fix" the OS to apply the ideas from containerisation. http://0pointer.net/blog/revisiting-how-we-put-together-linu...
A reaction can be quick enough to feel instinctual but still be an affectation.

Just because a person has said "uh" to fill pauses in speech so often that it feels like it comes without thought doesn't mean it's a behavior outside of their concious control...it just means it's going to take some practice to stop doing it. And that's probably a good analogy because you seem to be reading some persecuting motives here. "Here's an easy viewpoint shift that, with practice, can help you be less alienating/condescending to some people" is not at all equivalent to "you're a bad person for this thing you have no control over".
"But a long term sum of results is a completely different game."

That's exactly the point! A naive intuition about dice is that they have a single probabilistic long-term score. E.g. 6-sided die is 3.5. So if one dice beats another, it should be transitive (the intuition goes). It's the summation (implied by averaging over time) that leads to the naive intuition.
Square is just as bad as PayPal, IME. Lots of arbitrary rules, clients unable to pay me, funds withheld for no good reason, etc. I'll stick with bank transfers (ACH) or Bitcoin, personally.
If you're paying for things through Facebook they don't need to contact your credit card company to get a list of payments they've facilitated, for obvious reasons.

Given that the best minds of this generation are working on making advertising more efficient, would it be surprising that such information would help Facebook?
All fair, but you have to take the time period in context. There wasn't the plethora of choice we have today.
Hey thanks for sharing. Feedback would be awesome!
These stories from more simple times are always a great read, but for me they illustrate exactly how different and more aggressive our world is. Sure, they were rounding people up and putting them in camps. That needs to be mentioned. But visits from the FBI can no longer be waved off and childhood fun. They really do come back to haunt you. Being investigated is far less dangerous than falsely claiming that you weren't. In the past this would go undetected but today's electronic paper trails don't forget such things. They will notice.

The involvement of the school officials, even the parents, is also cute. Modern law enforcement doesn't hesitate to go strait to the kids. It is not unusual for a cop to pull a kid out of a class for a "chat" that could see them jailed. Parents often only hear about such things long after the fact.

The image of FBI agents in a black limo is precious. That is intimidating FBI man 101. They still do the 'parked in the driveway reading notes' thing today, but only where they don't feel under any threat. If there is any potential for a firearm at the location, or any hint that the suspect is in any way dangerous, they don't hang around as potential targets. If you see them doing the parked thing, wave. Say hi. Or don't. To intimidate they must first be seen. They will keep up the act until someone notices them. If you really want to make their week, get in your car and drive away. They love a good slow speed "chase" before confronting you somewhere out in the world.
Everyone replying to this article seems to be under the impression that it's a Boolean choice- shoes and poor foot development or no shoes and a long list of terrible other things. And this is a news site for innovation?

I've worn a variety of minimalist shoes, from vibram five fingers (you get looks, and they can smell awful, but they feel amazing) to Nike's thin soled line. Currently wearing a normal looking shoe with a vibram thin-sole and loving it. We can have the best of both worlds!

It sounds to me like what kids need is something closer to a strong sock- protect the foot, leave room for growth. Someone get on that!
HTTP uses TCP, which is always terribly slow to establish a connection, often useless with high packet loss.

Mosh is UDP, so there is no connection establishment (no need for multiple initial round trips before sending one bit of data) and no indiscriminate retransmission of data. Additionally, you can just continue sending data when your IP changes, connections aren't lost. That typically happens when in a train and you're quickly traversing multiple cells.
Depends on where you are, in some US states you can get licensed to call yourself a software engineer. This holds you legally liable to the code of ethics. It often influences court cases involving companies too: http://ethics.acm.org/code-of-ethics/using-the-code/
How to save $100's on Health Insurance
> it is also a huge bet to continue "business as usual"

Yes, but that's true for a lot of reasons that have nothing to do with climate change. I'm simply saying that if we're going to redirect a large amount of resources, we should redirect them to actions that will have a positive impact regardless of things in the future that we can't predict. As I said in my original post in this subthread, I think two important such actions are bringing people out of poverty (since the wealthier people are, the better able they are to adapt to change) and making our infrastructure more robust.
Inside Seattle's West Point Treatment Plant Disaster
For video processing I'd recommend a Macintosh as well.
> Im would very much prefer a "combatative society" as you call it, one where a philosopher is free to challenge any idea

I meant combative as in leads to physical altercation.

Raising mental tensions can lead to that.

We already have a very open combative philosophical society. You're not jailed for any of your speech. That's not true in much of the world.

Perhaps you consider that a low bar, but, in terms of human development, I'd consider it state-of-the-art.

I agree with you that a lot of society doesn't want open debate. But, it is legal, and if you crave it, there are venues for it. Debate club, politics, or really anywhere. There's a difference between legal and cultural.

The widespread cultural change you're seeking is much more difficult to achieve than simply making open discourse legal. And, arguably, making everyone talk and react the way you want, combatively, goes against your desire for everyone to have freedom to say what they please.

In fact, you have that freedom, you just don't want to deal with the reaction from society.

> To utilize courts as a artifical replacement parent to create a protected environment, from facts, from ideas, from the very reality of hostility - that breaks down, once not enough economic shield energy is left- what good is that for

Civility? If no courts, then what? Only money, and total rule by the wealthy? That doesn't sound sustainable.

The existence of courts naturally leads to upholding our written law, which needs to be interpreted as well as applied.

> There is after all still the ability, to stop hugging the cactee, turn off that source of media, sit on a meditating pillow and softly shake your head until the arguments to drive back that opposing view emerge from the subconcious stream.

If there's one thing on which we agree it's this.

> Not some ilusion of peace at paper-gunpoint, but a real understanding of what we made of allowing for real advances. Not this potemking village of civility, that falls apart at the first twitter huff and puff.

It sounds like you want better communication. I do too. I think we're getting there.

Honestly to me the world doesn't seem so bad, and I'm sure you have hobbies that you enjoy. I'm going to do some today. Hope you will too!
I am less concerned with the health of my feet than I am with the feeling of being barefoot.

Not to say I'm disregarding the evidence presented, but I'd like to be barefoot more than I am currently.

I wear muck boots nearly all the time I'm outside because they seem to shed chiggers and ticks pretty well. They're not especially comfortable, though, and are nothing like being barefoot.

FWIW shoes and sandals are nearly as bad as going barefoot, if chigger bites are the measure.
Bet this guy would've got along well with Richard Feynman.
In certain cultures, someone who won't steal from a rich employer to help family members is considered disloyal, and has reason to fear ostracism. And this in a culture where family connections are paramount. Solution of one such employee, somewhere in the western Pacific: Tell any lie necessary to hide the fact.
A patch for SSH Agent forwarding has existed for 4+ years, and there have been several iterations of PRs to merge that into Mosh. The maintainers don't care enough to merge working code for an oft-requested feature.

PRs:

Most recent: https://github.com/mobile-shell/mosh/pull/696

Oldest: https://github.com/mobile-shell/mosh/pull/423

https://github.com/mobile-shell/mosh/pull/583