skysight-inc/HackerNews huggingface dataset:
> I use KeePass 2.x on my laptop and it's been great for having complex passwords, but the few seconds it consumes to load it up every time just to log into a site is annoying. Worth the trade off, of course, but can't we do better?

Keepass only takes 1-2 seconds to open the database. Once that's done, no more delay...

Ctrl-Alt-K on Windows brings the window to focus, click on password entry, Ctrl-V and poof, auto-typed in!
> - web app: loads from a server and connects to a backend to perform its activities. Business logic is on the server. If at all, very limited offline capabilities

You're confusing web apps and client/server apps. Web apps are generally thought of as apps written using web technologies. This means that a web app may not even interact with a back-end server, or a native app may exclusively interact with a back-end server.
> Electron would be a deal breaker

You say that like HTML emails don't exist. If the client has to embed a web view anyway...
Programs do a lot more than they used to. Even though they solve similar problems as their predecessors. 300MB is perfectly fine for a modern app when computer team is measured in GB.
DigitalOcean Introduces Kubernetes Product
Bats are rabies vectors, so you'd have to look at the cost/benefit analysis on an uptick in rabies vs. a downtick in mosquito-borne diseases. I'm sure this has been done but I don't have a citation handy.
Either Zuckerberg Gives Evidence or UK Government Will Issue a Formal Summons
Stuff like: in app purshases. In app authentication. In app settings. Two "trust" to be allowed to use particlar apps as second factor. Accounts.

BTW: WeChat shows the future of all (not limited to chat) apps. The governmental control included I am afraid, but man is it future rich!

Personally I only use it on a dedicated phone to maintain specific relations, but it is impressive.
> Seccomp already permits this type of attack surface restriction, and Docker (with runc) already has a default seccomp whitelist. So by default you already get this.

gVisor's doc addresses this with:

in practice it can be extremely difficult (if not impossible) to reliably define a policy for arbitrary, previously unknown applications, making this approach challenging to apply universally.

gVisor's Sentry process in fact uses seccomp to limit the syscalls it can make (and thus in worst case the guest process by tricking Sentry). Furthermore it uses an actual networking filesystem protocol (good old 9p) to encode the rest of the file-oriented system calls so that they get executed by a separate process.

This arrangement shuffles the wide part of the kernel API surface into the per-container "proxy kernel",
while requiring a very narrow (and controlled) API surface to the rest of the host.

This is pretty much the same kind of deal (although quantitatively and qualitatively different) that OS level virtualization employs: guest kernels have a very narrow API surface area to the underlying hypervisor (and thus with the rest of system).

> The basic problem is that the policy runs in userspace and is thus more vulnerable than a kernel-side policy.

Color me skeptical, but running things in the kernel-side don't strike me as necessarily less vulnerable or more trustworthy. The linux kernel is quite a complicated beast with a very wide internal API surface area and despite the age still moving forward at a quite interesting pace.

There is a significant amount of research in running kernels with significant portions in user space (see the whole L4 family), and IIRC the problem has always been more about performance and adoption rather than an inherent problem of user-space vs kernel-space.

> It also has the downside that you don't get any of the contextual information the kernel has about a syscall if you just know the syscall being called (such as labels or namespaces or LSMs or access rights or what state the process is in or whether another process is doing something nasty or ...).

which in this case seems perfectly reasonable since this is not a generic "transparent sandbox" solution that enhances the security of regular processes, but more of a "lightweight kernel" that runs processes.

For example imagine you have a good single process sandbox (e.g. NaCl or https://pdos.csail.mit.edu/~baford/vm/) that is able to fully offer all necessary services to the logical guest process and only require a single TCP connection to perform all it's input and output (trough which you can e.g. run a 9p protocol and thus implement arbitrary I/O patterns with willing parties). It's easy to define a seccomp ruleset that will enforce that the sandbox host does only this.

gVisor is something "like that", except it's able to execute unmodified docker workloads.
I guess the point of the article is exhorbitant fees. An ice pack and a bandage in ER don’t have to cost $5k plus.
BMW, Ford, GM: World's Largest Automakers Form Blockchain Coalition
Hitting your head hard enough to cause injury is almost always a reason to seek immediate medical attention, especially if the head injury is the result of losing consciousness in the first place.
Super cool!

ctrl+f on "price" or "cost" turns up nothing. Well then, what is your business model going to be?
> To make Qt look good you have to start styling and using its weird surprisingly web-like stylesheets, which takes you out of pure native mode and into a hybrid rendering mode.

Note that Qt does not have a pure native mode, it always draws its own controls - it just has a very good imitation of the native controls (especially on Windows).
> “I decided to decline treatment because I can’t really afford any surprise bills right now,” she said. “The bill I’d probably incur would not be worth saving my ear, which was sad but a choice I had to make.”

She felt that losing her ear was a possible outcome of the accident, which certainly seems like an emergency.

More broadly, it can be difficult for a layman to determine what warrants emergency care vs what doesn't.
Highline BETA | Toronto, Canada | Onsite | https://highlinebeta.com

Highline BETA combines the assets and experience of leading enterprises, the agility of startup founders, and the methodology of investors to launch new ventures. We're building a new model for corporate innovation and startup investing.

We've got a lot of interesting projects in the near-term and are looking for strong, entrepreneurial developers to help us build new companies.

Specifically looking for React Native specialists, but also for full-stack generalists who like working with React, Node.js, Elixir/Phoenix, AWS, etc.

We believe that diverse teams build better companies and better products. We encourage applications from qualified candidates from all backgrounds, including candidates of colour, women, queer candidates, candidates with family caregiving responsibilities, immigrant candidates, transgender candidates, and candidates with disabilities.

Shoot me an email: rohan@highlinebeta.com with questions/inquiries.
If you want peace, you have to be prepared for war. We're currently the better part of a century into The Long Peace, something that has never happened before in human history, and it came about in part because of weapons development.

The same tools that provide the means for evil also provide the means for subjugating evil.

That said obviously we get into a lot of unnecessary war where a lot of people die who didn't need to. Still, you'd be a fool to sit on your hands while Russia and China race ahead in weapons development, with lower regard for human rights than the rest of us. You don't want them knocking on the door.
You may know this but for others who may not: there are tools like virt-sysprep that can (among other things) inject a random seed into disk images.

If you clone/generate VMs from one "master" image, running virt-sysprep (or similar) is one of the steps you should do right before launching a new instance (inject a new random seed, wipe out any SSH host keys, etc.)

Even DigitalOcean missed doing this step a while back.
Internals of webpack beautifully explained
One of the nice things about agile (done well) is that there basically are no managers and the engineers have equal status to people like scrum masters and product owner. They don’t get to make every decision about everything but everyone is similarly constrained to mostly make decisions about what they understand best — the product owner sets requirements and priorities, the developers figure out how to make it happen, and the scrum master makes sure things are flowing along.

At least where I am, there’s no management role I could go to that would make me happier or better paid.
This can't possibly hap... oh wait[0]

[0] https://www.bleepingcomputer.com/news/security/github-accide... dated 2018-05-01
I don't know if it's illegal, but unless you have a trademark on those names, you're almost certain to lose them.
> so you don't need your computer

.. which I have. Now I need an iOS device.

Or set up a GET endpoint with the python library and access that from my mobile device of choice
Hardware token seems like the obvious solution. As soon as I'm no longer a student and can afford to spend money again, my first purchase will be one.
Top Problems That Blockchain Technology Solves
There were waterproof phones with headphone jacks before the iPhone X. See some of the Samsung Galaxies as an example.
FTC Gives Sony,MS,Nintendo 30 Days to Get Rid of Warranty-Void-If-Removed Label
That's why you shouldn't do any quizzes or tests even before talking to a human being.
And then the author goes on to say "I would short the stock now".
Exactly... What other data am I giving them access to by signing up with an account that's closely linked to my IRL identity?
It actually happened in the past, and as you mentioned with sympathy of the jury [1]

[1] https://en.wikipedia.org/wiki/Kalinka_Bamberski_case#Abducti...
I remember when I was still a school kid there was another kid that fell on his head when he did skate boarding. He said that everything was alright. In the afternoon he got headache but still claimed it was alright. Next day he was dead...
YouTube content is created by human beings. There is an absolute bound to that (record everything everybody does all day long). No, its not geometric and can never be, right?

Storage and network charges are already pennies per terabyte-day. So currently and in the forseeable future, YouTube's costs will probably be administrative.

And that's all beside the point. There's not hard 24-hour one-channel limit to what YouTube can 'broadcast'. So their model is completely unlike a traditional TV station. So that analogy is flawed. So we can conclude, YouTube's decision to show (or not show) anything is based on completely different criterion. Pedantry notwithstanding.
This is a simple definition but I think it lacks a couple important things:

1. It doesn't match the words. If that defines a "web app" then where does the web come in? I would think part of being a web app is that you can access it via the web and don't have to install it on your device.

2. Usefulness of the distinction to users. The specific nature of the bundled runtime for the code doesn't matter to anybody. It strikes me as pedantic to insist that because under the hood a thing is running in a browser we should call it a "web app".

I think the most practical distinction is that web apps have a URL as the entrypoint. If you want to use it, you can visit the URL from any browser that supports the app. Web app requires a URL and a compatible browser.

If instead you install the thing on your computer and run it from there, it's not a web app. It's a native app. No URL and it doesn't care what other browser you have installed because it comes with everything it needs. It's independent.

How and why would users be expected to understand anything else?
Two simple rules for better one-handed Android user experience
Outlook is using 46MB for me at the moment. I don't have a particularly large inbox though.
From another post in this thread, ICANN rules prevent the two from coordinating.
Lots of places have multiple names. Especially in the Arab world, I would expect many places to have a "formal name" that might appear on a government map but that differs from how locals refer to it.

I'm alo not sure if the purpose of intelligence agencies is to collect the names of landmarks either. And speaking as someone who works with maps, it wouldn't surprise me at all if various agencies used severely outdated maps. In fact, I'd be shocked if they were efficient about that kind of thing.
Why and How to Use On-Site Polls
As a Canadian, we have our own share of problems with our health care system... but thank goodness this isn't one.
I don't think this puts enough emphasis on the fact that it is a local client and not a web service. I see some people here griping about Electron, but the privacy implications of being a local app are way more important than the performance of the framework used.
Gmail searching isn't really that great, it doesn't do stemming while searching, offline clients should be able to do better than that.
The IT Crowd Was Right – What I Learned by Reading RFCs
How can people read and hear about stories like this, and even possibly think it's OK or even normal?

How do lawmakers in the USA convince people that this is acceptable? I have never directly paid a single cent for healthcare, and neither has anyone I know. When I had to get 6 stitches in my forehead at 2 AM on a Sunday morning, it cost me nothing. When my friend needed to get the tip of his finger reattached, it cost us $5 for parking. When my brother spend almost a week in hospital after coming off his motorbike, requiring surgery on both his knees, it cost him a grand total of $0 out of pocket.

Are people just so blind to how extortionate healthcare is in the USA?

The argument that I pay for my healthcare in my taxes doesn't hold water either. I pay less tax in Australia than I would in California, and I get free hospital care as part of that. I don't have health insurance and see no reason why I would purchase it either.
Yeah. Easy. When I went to an ER because I had fainted multiple times they wanted to send me away, because "that's nothing too serious" ... and I thought that sounds reasonable and wanted to go home, they are the experts after all, aren't they? A good friend told them to do their fucking job instead and they grudgingly agreed to check me, but "you will be out of here in no time, there's nothing" ... so ... they did a blood check and I waited. And waited. "Well .. we don't know, something is off, we will keep you here for the night. But it's only a precaution, there's probably nothing wrong with you!" ... next day they found Stage 3 cancer, which had spread through my whole body. I almost died, had to spend weeks in intensive care, get chemo and operations and the full program.

And all of that only happened because my friend didn't take multiple "no" from the ER doctor for an answer and insisted that I get at least a rudimentary checkup by them, otherwise I would be dead. So, respectfully, your comment is bullshit.
I skimmed the comments here before reading the article and was curious what a "gore" looked like. After a seconds pause, I decided I should get on with reading the article instead of searching for "highway gore" :)
I'll accept that! Thank you for the perspective.
Show HN: Order Happy – start taking orders online
Did we miss the powershell boat?
The Month of LibreOffice, May 2018
I was disappointed to find it isn't a mesh network app
>Is it possible that VS Code (for example) exists (in its feature specific incarnation ) only because Electron is a cost cutter in terms of portable development?

It could -- though I doubt it.

But I was concerned with a more limited question: if there was a good VS Code alternative that's native, would many still prefer an Electron version?
O Language: First Router
Nice. Pity they put a lower bound in but I can see why they would do that. Too many small investigations would eat up their time.
I recommend reading the GitHub README[1].

> I don't really understand what the benefit is over seccomp-bpf

With seccomp-bpf you are filtering what syscalls can be made, but those syscall still happen in the host kernel. If that kernel syscall has a vulnerability it could allow exploitation of the host and other containers in a multi-tenancy environment. The gVisor kernel actually implements the syscalls, it doesn't just pass them on.

> Advisor appears to be working on a KVM shim, but I'm not quite sure how you can use KVM and still differentiate yourself from Kata Containers

Kata Containers virtualize hardware and run a regular Linux kernel on the virtual hardware. gVisor doesn't virtualize hardware, it is a kernel running in userspace, implementing syscalls.

> I just re-read the article and it looks like they don't actually use containers at all. Unless I'm mistaken this means that they are not taking advantage of any of the sophisticated security primitives in the kernel that ordinary containers use, and thus have the same (bad) security model as UML.

The gVisor kernel (Sentry) runs in an empty user namespace with seccomp filters applied.

[1] https://github.com/google/gvisor
Biohacker Aaron Traywick found dead in a spa
“While we cannot comment on rates for emergency room services..."

Why not?
I agree with you. The discussion has somewhat de-railed off-topic into a discussion about Electron. While that is an interesting discussion, it is pretty off-topic.
I would agree with you on a lot of drugs. Definitely Marijuana for one thing.

However the thing that is less obvious about drug use is how it effects everyone around the user. I'm from a low income rural area in the south and had a close friend, and a sister who both became hooked on metamphetamine and opioids.

My sister absolutely destroyed her life. The drugs cost money, and a drug addict is not stable enough mentally or physically to hold a job. The only option is for them to commit crime. My sister lied to our family constantly, and stole from us.

A serious drug addict is like a tornado destroying everyone in their vicinity.

Maybe for light drugs like marijuana it is a cognitive issue, but for hard addictive drugs it is very much a societal and criminal issue. Drug addiction causes user to commit crime out of desperation. A drug addict will harm the community around them.
I've seen sand used as well as water.
Good management would also mentor and coach people who get promoted. Being great at an individual contributor role is a good start to being a leader, but there are additional leadership and business skills and knowledge that need to be added on to successfully move up the chain. A leader who actively gives his newly promoted people those skills will help them grow to their full potential and avoid the Peter Principle. But if you just promote them and walk away... you are setting them up for failure.
O Language: Functions and Literals
Stretching NSX from the Datacenter to the Edge and Cloud
Show HN: YetiGoGo News search for the 100 most popular US sites in real-time
Which is what I use. But ST3 doesn't have the full power of a 20+ strong MS team behind it, but a single person (and another hired to help here and there), and so doesn't have the same momentum -- and it's getting behind in features as well.
You should submit a patch.
My Claws Mail currently uses 56M, multiple IMAP accounts configured, a few thousand mails, just visited all accounts before measuring. I disabled HTML display, though (most HTML is either spam or newsletter fluff in my experience). Claws is GTK2.
Timestamps.

How do I know when the other messages I'm seeing were posted? Maybe those people have long gone and I have no idea I'm talking into thin air.
Mergers like these will enable the company to renegotiate all contracts, including lease agreements for larger assets like cellular infrastructure (towers). Given this, it's highly likely that all the MVNO businesses like MintSIM, BoostMobile, Virgin will also be reviewed.

Remember- MVNOs exist solely to sell excess capacity, and the contracted rate for service is often renewed ever 3-5 years. This merger provides an opportunity to accelerate that review.
seccomp-bpf doesn't let you follow pointers, so you can't even implement most pledge() restrictions in it. For instance, pledge() always permits open("/etc/localtime"), but at the point seccomp
is run, all you know is open(some pointer to userspace).

You could imagine combining seccomp-bpf with some other system that reads the arguments after they've been copied to kernelspace, which is basically Landlock's approach https://lwn.net/Articles/698226/. But I've been personally waiting for something like this since 2011 or so when people were saying seccomp mode 2 should use ftrace, and Landlock itself has been in review (slash argument) for two years. An approach like gVisor works today.
STEVEN BURGOON: THE ART OF DIGITAL DESIGN
Zippity | Full-Stack Engineer | Full-Time | REMOTE (US Only) | https://zippitycars.com

Our goal at Zippity is to transform the personal car ownership experience by delivering radically convenient on-demand auto maintenance, cleaning, and fueling services, all powered by a modern online platform.

We’re looking for an entrepreneurial software engineer to become the 2nd engineer in our 5-person team. Our ideal candidate is an indie hacker or has worked in a small startup before and knows the mindset it takes to make an early company succeed. When it comes to the frontend, you should feel personally invested in delivering a great UX and enjoy putting on your designer hat sometimes.

Our current stack consists of React, Flask, Google Cloud Datastore, and Google App Engine. Deep experience is great, but we’re also confident that smart people can learn new technologies quickly.

We're a geographically distributed company across the US, but you should live in an area that enables you to gather with the team about once a month in the Boston, MA area. We collaborate on Slack, Trello, Google Drive, and GitHub.

Apply at https://bit.ly/zippityeng and we’ll be in touch!
The official telegram desktop client is Qt.
> Type safety is important to me.

Isn't that what mypy is for?
> Can you show me some references to this?

Lots of people have done the calculations. Poke around the Reddit Spacex forum and NSF forums, lots of discussions there.

> The first goal is to maximize aerodynamic efficiency, which means minimizing frontal surface area.

The fairing is already wider than the first or upper stages, so increasing those stages to the fairing's width would actually improve the aerodynamics.
It lets you own your ideas and work that you perform at home, such as a startup you run on the side. In other states, your employer will typically have you sign a work contract granting the employer all rights to everything you create at any time and any location.
Because regardless of what they say it is going to make them look bad?
A Photo of a Falcon 9 Fairing Descending to Earth
What is the salary band for the senior .NET role?
What is it that does cost $5k? Keeping a mostly-unused tomography machine and crew ready in case someone at the ER needs it? Insurance premiums charged per patient who walks in the door?

We get these complaints in Germany too (where I currently live) BTW. "A five-minute drive with an ambulance shouldn't cost €500!" someone complained to the newspaper here recently. It doesn't, what costs €500 is keeping enough ambulances ready that one can arrive within x minutes with y% probability, for IMO overcautious values of x and y.
An electron-apps can use and call native code. I see Rust getting some attraction being bundled with electron apps. This should be a thing every electron app maker out there. Rust or otherwise.
Knives, forks and spoons are called cutlery.
Profitable?
I would agree in the case of the wayback machine they have a very strong case under article 6(1).