skysight-inc/HackerNews huggingface dataset:
Best i can tell, unikernels are a reaction to the shift from VMs to containers in cloud services. This by pairing down the content of a VM to the bare minimum.

Meaning that if you have a buffer overflow or similar, all you could access was what was in the VM (unless you also happen to pack a VM escape).

That said, i can't help think "DOS in a can" whenever i read about unikernels.
When I see rich people being greedy, I find it hard to imagine how much worse they would be as human beings if they were poor.

They probably are poor, at least from their viewpoint, because humans like to compare themselves against their peers, not against the average person they have nothing to do with.

So rich people compare themselves against other rich people in their social circle and then decide they want to have a little more. It's not greed from their viewpoint, it's "not falling behind".
more like death by snu snu. Am I right.
Also, Linux kernel is C vs the mentioned rest C++.
That sure sounds like a problem, and the problem exists on the web. "Mobile web" is a useful and descriptive name for the bit of the web that suffers most from this problem.
I'd love to. Some of the things seem difficult to prove. Such as

> Welcome Home!!! Take a seat on the PORCH SWING on your COVERED DECK and enjoy the Fall Season! Come inside this cozy home and view it's OPEN FLOOR PLAN [calling this open floor plan is a big stretch], Original HARDWOOD Floors [and they are destroyed as a result. Water damage. literally cut through to put in a furnace in the basement in one place. Covered by a carpet in the living room and destroyed as a result] and FRESH Neutral Paint. Two bedrooms and a LARGE full bath [probably as small as it gets while still being a full bath] on the Main Floor with a SUNNY eat-in Kitchen and Conveniently located MUDROOM, additional bedroom/office in the basement [not legally a bedroom]. This home features Updated ELECTRICAL [in some places sure. Half the house is still crappy old cloth wrapped wire], Updated PLUMBING throughout, Living Room is WIRED for SURROUND SOUND, [broken] SPRINKLER SYSTEM and NEW Roof with a LIFETIME transferrable Warranty! Detached Garage has HEAT & A/C, Wired for Cable and LAN line [a CAT5 cable that terminates in the floor and is not accessible to be hooked up to anything because it's in the floor!], has Electric [electricity to the building no where near code because it is fed from two sources] and a HUGE Attic space to Provide LOTS of EXTRA STORAGE. This home has a Private COVERED PATIO in the back where you can relax and enjoy YOUR NEW HOME!

There was more in the listing than this but that's just the basic bio.
I did not realize the physiological effects would be as severe:

> The fraction of carbon dioxide is growing: It just crossed 400 parts per million, and high-end estimates extrapolating from current trends suggest it will hit 1,000 ppm by 2100. At that concentration, compared to the air we breathe now, human cognitive ability declines by 21 percent.
>Birth control has resulted in a decline in teen pregnancies and population stabilization where it is available.

Birth control has also contributed to escalated rates of dysgenic fertility. Smarter people use it and don't pass their genes on, while those with worse future planning abilities disregard it and have more children.

http://www.sciencedirect.com/science/article/pii/S0160289615...
So: a C++ competitor shall beat it in every dimension you've choosen, until then it's futile to complain about the shortcomings of C++.
This doesn't sounds very logical, only like a case of sampling bias.
> Good luck guessing that address. Our own unikernel, IncludeOS, randomizes addresses at each build, so even with access to source code you still don’t know the memory layout.

"There is one mortal sin in computer security (or by the way, in any kind of security) that is feeling safe. It’s just a variation of pride to be true, but it’s very deadly. Blindly trusting a protection technology is an extreme error."

Read up on DEP. Randomizing function addresses at each build is useless when it comes to attack mitigation. You need to randomize addresses at each execution.
I think you accidentally or intentionally revealed your location by mentioning "woodland".
Thx for the info
Well, a lot of scientists do advocate to keep warming to below 1.5 C, but that is not seriously pursued because it is not considered to be economically realistic or politically viable. The Paris trajectory is aiming for 2C, and hoping that it won't end up being significantly more. That is, not making the okay the enemy of the good, or good the enemy of the perfect.
Hard to take claims of security seriously for untyped languages which are not provably correct and lack a denotational semantics. Let's start by provably not compiling buffer overflows and memory overreads considering those are the vast majority of RCE and privilege escalation.
Taking control of all .io domains with a targeted registration
As discussed previously, the Google ones are like converted EPUB's, they don't match the original/real formatting of an O'Reilly DRM-free PDF.
So.. how do you explain darknet markets?
I could be wrong, but I think this is what Memory Management Units are for, on processor chips. It's one major differentiator between application processors and more embedded ones like Cortex-M or ATMega MCUs, which typically can't run complex modern operating systems. A lot of those chips have a simpler Memory Protection Unit that does basic enforcement of permissions like read+execute, read+write, etc, but they lack the ability to partition memory virtually between a large number of potential 'owners.'

I think - I'm still learning about this embedded stuff.
That's like saying that the world was flat before they could prove that it is round.
He often has a lot of good points, but it's not enough when assuming a pivotal role in society. You cannot just be right 60% of the time, because 40% people leftover is far too much. It's saddenning for instance, PA had valueable goals, but if the design assumes hardware that doesn't exist (exagerating) then it's not a good fit for a standard audio stack.

And I'm not sure it's really ego.. I'd rate him at about 0.07geohots.
I tach at a community college and this topic comes up periodically. The definition used for being homeless is not what people generally think of when they hear this term.

What is surprising to me is that I'm expected to teach a homeless person in such a way that they pass the class and know the material. When a homeless person fails my stats suffer. It is not reasonable that a person whose life is in chaos be able to pass their classes and understand what has been taught.
> But your original statement was much stronger ("impossible")

No, my original statement was that waterproofing would be all but impossible, which, unless you have an example of a waterproof modular phone, still stands.

> The Fairphone's specs are deliberately not top-of-the-line in order to give users better battery life.

A handy excuse. Still means you’re getting a slower phone, worse screen, camera, etc.

> That and repairability is worth much more to me than the possibility to submerge the phone in water.

Tell that to the thousands of people who were previously losing their phone to water damage every year.

And it’s not like an iPhone is not repairable, its just that you’ll need Apple to do it for you. A small price to pay for a better product.
Nowhere in the OP's original comment is it clear that this is third person point of view from a "hypothetical hiring manager."

Had they articulated "A hiring might think" at the beginning or even anywhere in their post then yes it would have been clear.

Regardless you don't want to work for anyone - fellow team mate, hiring manager or company that harbors that level of suspicion towards candidates. It's a red flag. I did not miss the point.
I think their business benefits are real:
Small business owners are often brutal at sending out invoices. They procrastinate like everyone else. The sooner you send out an invoice, the sooner you will be paid.
Also, tracking payments provides structure to follow up with your receivables. Often a reminder is all that is needed for payment. Customers just forget, but do want to pay.
Clear invoices that are easy to understand will also have fewer questions and are less likely to be contested.
Ehh... you can often prove that X algorithm is not susceptible to A, B or C attacks, but you cannot usually prove that the algorithm is "secure" in a fundamental sense.
Home heating and meat consumption are the biggest emitters of greenhouse gases. The creation of the mobile device is peanuts in comparison.
We had a similar programming problem for a Capstone project. We were told it was for solar panel tracking, but it could have easily been applied to something else.
Iterators and Streams in Rust and Haskell
This is completely fine business decision-making. The only feedback that matters to people who make these sorts of decisions is money, so the only effective action to take here is: 1. contact a lawyer who specialises in workplace law & sue; 2. unionise and strike.
That's the reason - you resigned. You knew for weeks or maybe months that you will be going away, it was not a surprise to you that it will be your last day at work, if you wanted to sabotage your employer you would to it before informing them about resignation. It's totally different the other way around especially when highly sensitive data is involved (like credit cards) or if you have keys to the kingdom. Some people have instant urge for revenge after firing talk. That's why companies that don't know theirs employees well or don't trust them, are escorting them immediately out of the building "just in case". I agree that it shouldn't be like that but sometimes, if you are not sure how employee will react is better to be save than sorry.
>You do realize that the disc world books aren't actually economics research papers, yes?

Based on your downvotes, it seems that people on HN think that fiction can prove economic theory.
Without a formal proof there is no measure of correctness at all.
It's theoretically possible to reconstruct exact images of objects you are imagining. You could just show them an image of the yellow bus you saw. I wonder how communication would evolve with such an ability.
Are you going to stop eating meat?
I'm a psychiatrist. Much of the valid criticism in this thread could be applied equally to all branches of medicine. For example, the number of good randomized controlled trials for surgical interventions is probably smaller than you think. Also, consider how changing the cutoff score for diabetes makes thousands of people diabetic with the stroke of a pen. The dilemma of an applied science is that I have to make a decision today, not in 10 years when we have more data.

With regard to lumping disorders together, this is the camp that I fall in. I think we will look back at our present diagnoses the same way we look at a historical diagnosis of "fever;" it's correct but not as precise as it needs to be. The prevailing direction in research is to move toward clusters of symptoms rather than diagnostic labels. The relatively new NIMH RDoC will help with this:

https://www.nimh.nih.gov/news/science-news/2015/the-nimh-res...

One of the other things I'm seeing a lot in this thread has to do with the tension between autonomy and paternalism. This is a problem that keeps me and many of my colleagues up at night. At what point do you step in to limit a person's decisions? That's not something that most of us take lightly. I sure don't. At this point, in the US, the primary criterion for making decisions for someone is based on preventing injury to themselves or other people. This is a reasonable, but complex, dividing line. An unintended consequence is that it continues to over-emphasize and reinforce the connection between mental illness and violence.
Kindly disagree. If a business has a need that is critical to the business, not hiring a person with technical experience to manage technical things is just a mistake (or the business being lazy). I dont understand the shying away from hiring a qualified individual here. The fact is, its 2017 and there actually are a fair amount of qualified technical managers who can communicate and fufill the role.

Many other comments have pointed out various analogies in other fields that reinforce this.
The movie The Prestige deals with the concept of self copies too.

https://en.wikipedia.org/wiki/The_Prestige_(film)
Yeah, I've been out of the Windows game for some years now, but my wife has a few (desktop and laptop), occasionally comes to me and says "it's slow. fix it." And indeed it is slow, even on moderate browser use -- things just hang. Specs are more than adequate.

I have to say (after halfheartedly looking into it a few times): "Um, sorry honey, I have no idea. Guess it's a Windows thing." She nods, and goes back to patiently waiting minutes for the browser to stop hanging! Seems that people using Windows just accept this kind of thing as a given, to the point they don't even notice it. (I've installed Linux for her a few times, but of course, it's too different, doesn't run Photoshop, etc...)
There is actual science behind finding nutritional deficiencies. You surely don't think vit D deficiency is "BS" or calcium deficiencies. Maybe consider your point of view is not as strongly supported as you think.
https://ows.doleta.gov/unemploy/content/sigpros/2010-2019/Ja...

has the actual maximum weekly benefit numbers...yes, Mississippi is the lowest at a maximum of $235/w.
Benefits are usually for up to 26 weeks (some states are less.)

Note though--

1. This is the max state benefit you can receive. Roughly speaking, If you earned less than 104 times that the prior year you will get less.

2. They can deduct/delay benefits if you are receiving severance (depends on the state)

3. If you earn anything (get a part-time job, or some contract work,) while receiving benefits, that will be deducted. (Exactly how depends on the state).

4. You don't get benefits if you resigned or were fired for cause.

5. You have to be actively seeking work (so no vacation to recharge your batteries after being laid off....they can and do check travel records.)

6. Job search costs and paying for the full costs of healthcare is usually in excess of what you will get in State benefits.
Not one Johnny Mnemonic joke? I'm proud of you guys.
That's why I do strength at home. I manage to pull about 30 minutes a day (not much yet), and I interleave upper body/legs every day. Been pulling that for a few months and managed to get fitter, not loosing weight (weight has always been extremely difficult to get for me, so that's a plus).
Let me clarify: the type of procedure I suggested requires close collaboration between HR, legal, IT and the department the employee is in, and it requires careful execution. That can ensure that employees are not terminated while they are out sick, among other things.

For example:

It's Friday afternoon. HR calls department manager and asks them if Bob is currently at his desk. Department manager confirms.

HR then asks department manager to ask to have a quick chat with Bob, and to notify HR immediately before that meeting starts. Department manager arranges this with Bob, who is wrapping up another meeting.

15 minutes later, department manager sends an email or IM to HR saying he/she and Bob are about to head over to the meeting room, where Bob will be fired.

HR confirms, then contacts the IT department and asks them to immediately revoke Bob's access to all critical systems. (The procedure for this will be established well in advance, and documented. Ideally a script will make this a single-click operation.)

In the meeting, Bob finds out that he is being let go at the end of the day, and told that he can spend the remainder of his time at the office saying goodbyes and maybe even writing a goodbye email to his coworkers if he chooses to do so. He is explicitly instructed to BCC his manager and HR in that email. He is also made aware, both verbally and in writing, that his access to all other systems has been revoked, and even attempting to use those systems will alert HR and result in him immediately being escorted out.

--

Of course you also need strict policies such as "employees cannot use their personal email addresses when signing up for products and services on behalf of the company." That way if you fire someone you don't lose access to critical systems. Have a shared email for each department that is used for that purpose.
And it's not enough. It just isn't.
A lot of time has been spent on optimizing Chrome's build:
- Ninja build system will perfectly parallelize the build without overloading resources (modulo this OS bug)
- Meta-build system was recently completely replaced (gyp-> gn) to improve builds
- Lots of work on clang-cl to allow compiling Chrome for Windows without using Microsoft's compiler
- Distributed build system to further increase parallelism

So, lots of work has been done to deal with the build times. And probably not a lot of low hanging fruit to be found. But, still more work is being done. Support is being added for 'jumbo' builds (aka unity builds, where multiple translation units are #included into one) which is helping a bit with compile and link times.
Fascinating stuff, thank you for sharing.

I'm glad you were able to make it out okay. :-)
The point is that once you're doing that, and implementing communication between all your separate owners (which map pretty precisely to a reasonable definition of "processes")... you've just implemented another operating system, not a unikernel.
Taking Control of All .io Domains with a Targeted Registration
No, it's tough no matter what your first language is, unless you've learned how the locals pronounce it. "Wuster-sher". Easy peasy.
The reason eToys stuck in my mind was their ham fisted legal battle against eToy: http://www.independent.co.uk/news/business/analysis-and-feat...

Can we agree that WebVan was a watermelon company?
Automated Verification of a Type-Safe Operating System [pdf]
I don't see how second-guessing everyone's motivations and looking for hidden motives in every single thing they say or do can be "soothing", but to each his own.
"It's not a lie if you believe it" - George Constanza
The P100 is about 10x the price of the 1080 ($6000-9000 vs $500 for the 1080 and $700 for the 1080TI).

I've talked with several second-tier cloud providers, and the GTX 1080TI is what their large-deployment customers use. At the NVIDIA conference they were all promoting the P100 (NVIDIA insisted), but all admitted that nobody asked them to deploy P100s at scale.

The Hetzner box is about 0.15 an hour. That means more GPUs per developer.
"but the human eye can only see 30fps!"
Even crypto algorithms rely on unproven assumptions for their security, even ignoring e.g. side-channel attacks.
I just finished Hardware Hacker by Andrew “bunnie” Huang, and I'd highly recommend it. Completely changed my perspective on hardware production, and China's role in relation to it. And for fun he delves a bit into biohacking and how it's related to computers. I think the HN crowd would be into it.

https://www.nostarch.com/hardwarehacker
It seems you didn't wait social networks to live in a bubble ;)
The Nuremberg judges apparently had an easier job specifically because Nazi Germany was reluctant to codify many offenses as law. "I didn't want to break the law" is apparently a better defense in such circumstances than "just following orders".
Actually, one way to attack the problem is something Hacker News folk could help with:

Build "open source" coding, grouping and costing schemes and tools to maintain those schemes. It would look something like: 1) a software tool to maintain coding systems, grouping, and related costs (essentially a database front-end); 2) something like Wikipedia/GitHub that maintains version history and controls for coding, grouping and pricing schemes; 3) crowd-sourcing so healthcare professionals and organizations could help maintain the data; and 4) a non-profit, non-governmental organization (maybe something like the Mozilla or Apache foundations) that runs to help govern and provide structured releases of the open coding/grouping/costing data.

These are just my ideas, but having worked in this industry on the problem of health insurance/healthcare fraud and "healthcare cost" - there are a bunch of organizations making a small fortune controlling these schemes (ex. the AMA) - something ripe for disruption (I hate using this word, but it's the truth).

You need quality coding/grouping/costing schemes and systems for the industry to function, but it should be many, many times more open than it currently is.
Not necessarily. The kernel can run the code in non ring 0, ie in userspace. I can't speak to what is typical, but i imagine you'd get most of your gains by stripping most vulnerable code out of the system outright.
Of course not! Webvan was an enormous undertaking. No amount of bongwater gets you the service Webvan built --- a service, for what it's worth, that has also created several unicorns, an IPO, and the largest Amazon acquisition in its history.

I was a Webvan customer in San Francisco, and it was better than anything I had for 10+ years afterwards.

Be careful about what you're trying to argue. If Taibbi was just arguing that Goldman participated in the startup market, and that most startups fail, he'd be saying something true but banal. But that's not what Taibbi's saying. He's saying something that's not banal, but also probably not true.
The big energy producers love this message because it results in nothing happening. The only way we will solve this problem is by attacking it at the source, by shifting taxes to carbon.
Thank you very much. I will investigate.
You're applying your feelings where there is well-informed scientific consensus on the matter. It's not sensationalism when the science backs it up. It's too bad you don't like it, but nobody really has anything to indicate the contrary.
First, standard page fault mechanisms would still be in place, that's a processor/architecture feature, so out of bounds memory access would be detected just as in a normal operating system. Of course, a normal operating system does not detect many/most buffer overflows.

In general, you could have a unikernel where it's impossible to get executable buffer overflow because there are no memory pages that are both writable and executable - as the article describes, that'd need some help from the hypervisor for the initialization.

Return oriented programming exploits could work anyway, though.
Of the developers I've met recently, this wouldn't surprise me at all. The world revolves around them. Not the product. Not the user. Not the company. They are a "developer" or worse, an "engineer" and can do no wrong.
I was told that the US had far less MDs than what is actually reported by the WHO. My bad for not checking my sources.
However, we apparently have 40 MDs per 10'000.
My main point was that doctors salaries have a minor impact on the cost of the whole system, and i think that still holds, though. If you calculate the ratio of the in-pocket sum that goes to the MD compared to the whole bill for a hospital stay, I do not think it is that high. So even if you are right about the guild problem, I don't think that makes it a solution. I admit I did not look at official numbers about that, though.