skysight-inc/HackerNews huggingface dataset:
>Don't build your containers from public, un-trusted images!

The author is complaining that you can't build these private trusted images. Software developers have got it in their head that containers are a way to package & distribute software. They're not, that's what the OS's package managers are for. If your software requires Docker as a build dependency, you have failed to properly package your software.

As a concrete example look at Ubiquiti's UNMS.[1] Their package consists of downloading & installing Docker binaries on your system, not tracked by the OS package manager, and then running a bunch of containers built from these public un-trusted images you just told me not to use.

They also conveniently ignore the fact that I already have a Redis server, I already have a PostgreSQL server, I already have an NGinx proxy. (Plus I guarantee my database servers are better tuned for my hardware than some random image from Docker's library.) It is not up to some random software developer where I should be drawing the isolation boundaries on my infrastructure. They also make the big assumption I want to use Docker to manage my containers in the first place. Perhaps my company already uses Solaris LX-branded zones, or LXC, etc.

Now imagine if instead of spinning up a PostgreSQL database container, it used MS SQL as it's database of choice. You think I'm going to let some random developer dictate whether or not I should spin up another SQL Server instance and pay MS for another round of cores / CALs?

Yes - you can build your own containers, and they're fantastic - if software developers properly package that software for ease of installation & configuration. Software developers should not be dictating what container/virtualization framework I use, what configuration management I use, etc.

[1]: https://help.ubnt.com/hc/en-us/articles/115012196527-UNMS-In...
I doubt one can ever be truly depressed in a Intergalactic Starfighter - sounds too much fun ;-)
"Docker containers do need better security introspection and that's going to be a big deal going forward."

Exactly!

And npm. And maven. And every damn package system for every damn programming language since package systems are now a requirement.
> highly generic, often looking to implement something completely off the shelf as far as problems go.

There is serious work being undergone in automating this using advanced ML. In 5-10 years most of these problems will be LEGO-ized and humans won't be needed on that level. So your generic JavaScript developer used to glue these pieces will be gone.
Announcing Three Winning Climate Change Projects
It would be improper to limit individuals in their interactions with other individuals or corporations via an amendment. A law is the proper place for that type of restriction.
Who said they need it?

Changing query strings is also not evil. It’s something that can happen on the web and marketers need to deal with that. I can’t believe the sanctimony of this comment.
Serious question: Why can't we, at least on freeways, build (either virtual/software based or physical/metal) rails into the road, and "self drive" them autopia-style? It would allow us to retrofit all vehicles, regardless of year made, would allow fully autonomous driving on freeways, and would also solve the last mile problem of public transportation by allow cars to simply drive that last mile as normal.

Is the infrastructure investment too high? Does this not scale?
Alternatively we could just regulate matters until the only way for them to make money is to stand in front of a frier and make french fries.

Acting like this is a losing battle makes such a foregone conclusion. Marketing is like 0.0001% of the population its ok for the rest of us to disagree and regulate them to the degree required to ensure our continued wellbeing even if this means regulating them virtually out of existence.
Ask HN: Does anyone work remotely as a hardware/electrical engineer?
If so, what do you do, how is it, and how did you find the job?
My eyes see the curly brackets easier than indents for scope probably because of my background and I forget the colons sometimes but yeah Python is a usually a pleasure too
Haha! Nice.

We should turn this into an addon that automatically mangles every URL.
Many governments are providing access to the sort of data you link out of a desire / mandate for transparency. As an undergrad journalism major, one of our assignments was to dig up as much information as we could from public records about the school’s dean (he was a willing participant). The purpose of the exercise was to impress upon us how much information was available through public records.

The difference now is that those records are digital and don’t require (in most cases) flipping through actual paper documents.

The question of privacy vs. transparency is an active area of conversation now, particularly because people like yourself are discovering that you never had privacy around some transactions in the first place. Also, machine readability has changed the threat model somewhat.

In general, however, I’d guess that transparency and open access to many kinds of data will continue to be the way the law leans.
To put things in perspective, every decade there is an uber popular so called simple but highly inadequate non-type checked language that is taking over the world of novice developers. It's a social phenomenon. Started with Basic, JavaScript is the latest incarnation.

By the same token, there is also one overcomplicated yet unavoidable professional language. In that sense, Scala these days has a proud lineage of C++ and PL/I.

And one Lisp leader per decade for humans who not only perceive human-oriented syntax as an apostasy and a personal affront but expect that Borg of parentheses will win any moment now. Hi, Closure.
This is already live in a high school in China
That doesn’t solve the traffic problem, which is what the company is addressing.
Only demoralizing if your staff haven't updated their knowledge of JS since 2005. :P
10 factorial seconds is 42 days.
I agree. DOM will come, thinking that GC can not be developed in language the browser (and javascript) is built in is a bit naive (not to mention GC is a complex solution for simple non-problem, I would rather use malloc/new and free/delete + destructors than relying on Terminator Skynet ripped AI doing this really simple task - tribute to java and inability to free memory when needed! Anyway with each tab running in separate process, system will take care about memory leaks ;) ) while the runtime - the last time I checked, the CDNs were serving javascript libraries over mb in size and I really see no problem for them serving python runtime, while for c++, the runtime can be the browser itself and even if you pull in libc or proxy to the existing browser functions, this can be really, really small. Believing that code, that was designed to be human readable (as js), can be shorter than the opcodes doesn't really fit here.

I have heard this runtime considerations before but they are taking into account that someone will run webassembly compiled JRE in browser (and I am sure that right now, there are some freaks trying to achieve that). But there is still good old C++ (or Rust) not as productive as scripting languages but this is just due to much less open source "technological stack" (or some might argue, tribute to low quality of software today, "technological garbage") rather of not beeing capable of beeing competitive.

I think that the coolest trick that web based technologies pulled out was to convince the world, that the whole GUI needs to be primitive, simplistic, as they were unable to create something that desktop applications were doing for decade (speed/size considerations) and it might just happen that we will return back to owner drawn controls, where you wont be able to make distinction if app is running locally or in browser (no, I don't mean Electron, pun intended). There js will be unable to compete.

Anyway, push for webassembly is not here as corporations want to do something good. They want to push all computer users into old mainframe scenario, where you would have to rent space and cpu in a cloud and have just dumb terminal and javascript has hit its limits to replace desktop environment as it is, even with Windows Metro look (another simplification of GUI, done for mainframe scenario, Windows 365 are not far away)

Javascript was usefull in era of simplistic web pages as a small hack into html, but for next step we need something more and here there are other languages that can offer much more but are now limited to running in backend as they don't have browser support. But this will change with webassembly.
To add some contrast to this discussion, let me say that I think it looks quite neat :-) I see some folks here are quite shocked by it. Maybe using these shock site URLs (https://github.com/huntwelch/UTM-Mangler/blob/master/utm-man... ) is a bit over the top.

I was casually musing about such an idea myself a while back: https://twitter.com/harry_wood/status/735048026335682561 . This offers a way to more actively fight back against the over-use of messy UTM URLs. Perhaps a gentler thing to do would be to link to a place/places which re-educate web developers on how to design URLs. (It seems there's a few folk round here who need some re-education on this matter!)
I looked online for companies that needed a freelancer, wrote a few of them emails and started working for them.
Most funds actively try to stay out of the media. For some it's a core strategy.

( "Out of sight, out of mind" )
Contact a local Lodge, explain the situation, and usually you can get a "letter in good standing" from your original Lodge (or Grand Lodge), "demit" (officially leave) your original Lodge, then apply for membership at your new local Lodge (and pay normal dues and so forth).

They will not make you go through the degrees again - but you can surely observe others if you like, and the new local Brethren can help you get caught up on all of the modes of recognition and so forth.

People "going away" from Masonry for decades, and then coming back, is not uncommon at all, and nobody will look badly at you for it. Especially if you say "I felt like my degrees were rushed, and I'd like to learn more".
How many people do you see setting up a deploy pipeline that includes pulling security updates into the base image and redeploying as needed?
In my experience, it's much more common to see docker images that have been untouched for months with zero accountability of what exactly is running there.
Has sentencing significantly increase around the world? The US is not the only source of malware.
The thing is that any separation in the roles in ineffective. [...] The right axis for separation is hardware v. software.

Any separation is ineffective except along this one particular completely arbitrary dividing line? If that were true we'd still be hunting and gathering and nothing else.
If you don't have tier one interns and you're not the kind of employer who knows Nobel laureates like elsewhere in this thread... Then you can probably just throw away your interns work after the summer. They are just "normal" college students after all. Personally, I know none of my student work should have been used in production.
That's basically because our definition of second is no longer based on the rotation of the earth. If it was it would be exactly that.
Ditto. Very happy with EasyDNS these last 6 years. Had some wierd renewal issue 3 years ago similar to what the OP described but had someone on the phone immediately and the problem was resolved within the hour.
There is SSL/TLS, unless it's done wrong (invalid certificates get ignored by the dependencies manager), it's safer than the old "md5 of the file" systems.

Now, some dependencies are fraudolent (especially true in the Javascript world because it eventually targets a lot of user browsers), but nobody ever checked the sources anyway...
Do you know why there is a difference between Manslaughter and Murder in the legal code? For the same reason that your statement is absurd. If you don't understand that then we have nothing else to discuss.
So do Coursera, Udacity, EdX, Apple, and (I assume) MIT.

I would say that we need a new AI course like we need a new Javascript framework, but education is different. Different people learn in different ways and it might be useful to have different courses.

I wish we could compare all the courses in some kind of overview to see what they do, how they compare, and how well people learn from them.
These days it seems like you need to remove all the batteries from your phone/smartwatch/assorted botnet devices to get any sort of privacy.

And then you'd still have a half dozen CCTV cameras on you.
The companies they're applying to are engaged in behavior that is just as bad, so these "catfishers" are just creatively adapting to the unfavorable situation that employers have collectively created.
Human or Bot: You Decide
Introducing the Microsoft Edge DevTools Protocol
IBM bans USB, SD cards, flash drives and portable devices from every office
What's an example of a "sailing to Africa and back" problem in JavaScript?
Yeah, BT after resume was f'ed for me too. Solved it by:
- upgrading bluez to 5.49: https://launchpad.net/~bluetooth/+archive/ubuntu/bluez
- hacking a script that toggles rfkill (un)block <hci0 dev id> on resume

BT applet, at least on Unity (yes, I'm one of those people) seems to be borked in that it can't enable BT after resume. I'm guessing it's because it remembers the wrong BT device ID (which gets incremented after every sleep/resume, at least on my system).
Or Ad Nauseam: https://adnauseam.io
It's Time for Cities to Rethink Right Turns on Red
This is no guarantee. GoDaddy and Google Domains, in particular, have demonstrated willingness to throw you into clientHold hell for political reasons, even for "tried and true TLDs".
Yeah, the reality is some of us got replaced by Adobe and Salesforce.
You know, I used to agree with you. But the reality is you have to weigh the massive productivity boosts that things like docker bring to the table vs. the potential issues it can bring. To a large degree, good perimeter security mitigates a lot of the concerns of containers themselves running slightly out of date software.
I am not a farmer, so I apologize if I described it incorrectly. My point still stands though; order of operations matter but not the timing of them.
If a game has multiple sound effects controlled by javascript logic, then what is the "individual media element"?
Huh? What are you talking about? The escalating compute involved in DL is obvious to anyone reading the papers; OA is just doing the work of putting numbers on the trend.
Agritech mobile platform gets grant funding for expansion
Another company wasting its time reinventing the wheel.

We solved these issues in the 19th century.

Our transportation problems are political, not technological problems. The problem is the lack of political will to fund and build public transportation and active transportation systems instead of continuously expanding the road network.
If I need to use Hadoop, I'll download one of the pre-built binaries that they offer on their site.

You'll notice that the Debian Wiki users have given up on building it since 2010. That was three years before Docker even appeared. Almost nobody was using containers back then.
He was applying to a sales position. Sales is fundamentally about lying to potential customers to sell them stuff.
Why are you surprised by 2-3x? 120/hour is 2x 120k/year, which you charge for things like time off, extra taxes, and benefits.
What I find just as interesting is how this "went viral". Nearly every publication has a story on it. How did they all decide to publish - at nearly the same time? There has been no lead up here, just instantaneous.
Link to live dashboard of Rust vs Go activity on GitHub:

https://demo.humio.com/shared/dashboards?token=g79uTaUrFY9ky...
You want every single cell phone call in the world to send out a signal over every single cell tower?
I'm the lead author, and I can only speak for myself, but what drove me to spend a lot of time on this post is a sense of caution. I think AI is likely to have amazing positive implications for society, but it also has negative implications, and if it advances faster than expected, we're going to have to be very alert to properly deal with those negative implications.

The facts about hardware are hard numbers and difficult to argue with, at least in order-of-magnitude. I agree the implications for AI progress are very open to interpretation (and we acknowledge this in the post), but caution means we should think carefully about the case where the implications are big.
Choose an article to read from these results: https://www.google.com/search?q=myth+maximize+shareholder+va...
What actual problems did they solve?
That’s been 5-10 years out since the 50’s, right?
There are been several attempts at introducing a new build system, but they have been all shot down over introducing dependencies.
IIRC GCLID and DCLID parameters can't be queried except by Google Analytics.
Germany's Cabinentaxi was the first on-demand rapid personal transit system. They may not have solved the personal transport problem, but they built an impressive test track and made a great promo video: https://www.youtube.com/watch?v=ERdF0FK-2io
Speaking as an (ex- (sort of)) sysadmin,

"All of which are clunky, opaque, and harder to work with than any other language I have used in the last decade."

Wrong question. A better one: Is it more clunky, opaque, and harder to work with than every other language that's appeared in the last decade? Because no one seems to agree on what is specifically better.
> Jameson is better than Johnie Walker Black

Obviously this is subjective, but I disagree so completely I can't even imagine how anyone could think this.
> Personally when I see a boxing match and see somebody hit in the face it hurts me. I think that's called empathy.

It's also empathy to see someone hit someone well and feel the flush of success.

I'm not athletic, and have never been good at sports, but the very few times that I've done them and done well it has been exhilarating in a way intellectual pursuits never have been.
What fascinates me about this is, and sorry for being morbid, but what happens when y'all die? Does knowledge of the lower levels of the stack go away with your generation, or will there be enough of us young ones picking the important stuff up?
Exactly. I assume that's part of the point.

But having a law doesn't mean people or corporations won't break it out of the 'kindness of their heart'. Or because they're 'good people'.

For example, look at 'No gun zones'. You think a criminal is not going rob a bank at gun point because the bank is a no gun zone? If anything it incentivizes them because they know they'll have a monopoly of force upon entering ( if they have a gun, and can fairly assume no one else will because of 'no gun zone' policy )
Perhaps interestingly, I've had some similar complaints about package managers like homebrew.

I've noticed over the last decade that a certain level of knowledge about building from source seems harder to find via search or engaging in a community forum/chat. The assumption is often that everyone will be using the package manager (I'd say that's especially true on macOS, but it might be an artifact of me spending more time there since it's been my most used dev machine), so if you have trouble building something, the answer will frequently be "just use homebrew -- whoever maintains the formula will already have solved your problems for you."

There's two problems with this: first, that's presumably true for the source build, and if you can hit a case that the source build doesn't work for, chances are pretty good you can hit a case that brew doesn't work for (my experience is that more often than not they go together). Second... I'm happier to use package managers for applications meant to live on my machine and never go live elsewhere (heaven knows there's lots of stuff I just want to install and get on with my life rather than fiddle with), but for applications I'm deploying, it seems to me it's generally wise if someone involved in the project has a picture of the build details and dependency graphs in their head.

Some of the automation we're throwing at operations is really convenient. It's not simple, though. And depending on how much forethought is put into it, I'm starting to think of it as ... maybe not technical debt, but a technical credit card which is super convenient at times, but also can easily become debt if you're not careful with it.
That's tremendous -- never knew such an organization existed.
I think it pretty much comes down to social media. All the people that are publishing initially saw it at about the same time and it seemed like something that would get the clicks.
You can be upset about an aspect of a product, and seek to change that aspect, without abandoning use of the product. For example, 1.3 million people are killed by cars every year, and while we recognize the risk, we also constantly improve them through safety regulations, training and improved technology. Just because people use cell phones and apps today doesn't mean we're okay with the downsides and should stop trying to improving them.
How the World’s Biggest Companies Are Fine-Tuning the Robot Revolution
Tesla has 10% of GM’s employees? That’s nuts. Does GM have a lot more contractors?
> It just makes it tougher for companies to manage their marketing spending.

Frankly, that's not my problem. I don't know what they're tracking and why, but I'll err on the side of not being tracked, however harmless it may appear.
"I can do this within an hour with gradle, ant, or maven."

For something that isn't JVM-based?
Please don't remove these tags. Our system needs them to tie up your orders to where you came from and your personal information. Which we can use to analyse and ensure we spend more money on targeting people like you.
It is a mess, but one part of the ever transitioning "sysadmin role" that is valuable is, being able to code and understand it. That being said, good sysadmins (rare), can and do.

Isn't most of this being driven by society in general though? Everyone wants everything now... we're generally feeding this trend to do whatever it takes in the shortest amount of time.
Exactly. It is a childish and potentially suicidal point of view when you take into consideration human history and the rise and fall of nations and entire peoples with respect to technology and military power, when allowed to move beyond virtue signalling, which is all this really is.

The more important thing to attempt to control is the application of the military as a defensive or offensive force. Sabotaging the military because you disagree with an aggressive/offensive or otherwise unjust application of force is really missing the point.
That was a rhetorical question :). If I delete files by accident, RAID won't help me.
I used a free domain coupon from domain.com a few years ago, and was spammed with both snail mail and robocalls (advertising services for the domain) for months afterwards. I don't know whether they're selling customer data or what, but it left me with a very negative image of their company.
Ghost is already 5 years old... I'm getting old! I remember the first post...
Agreed. There needs to be criminal liability for folks like Stumpf and other big bankers/corporate overlords.

But do you think our government will ever stand up? Doubtful
How to Receive SMS Messages into Google Sheets with Apps Script and Twilio
This is a common sentiment but it certainly doesn't cover "all the things" people hate. I hate dynamic types, I hate imperatively constructing "types" through prototypal inheritance, I hate "this", and none of that has anything to do with the DOM.