skysight-inc/HackerNews huggingface dataset:
> I disagree that there's never a good reason to do this though.

The number of cases where it is an acceptable idea to do this (compared to the number of cases where people do this because they read it on a random blog post) is so small that it is statistically insignificant. In my view, it is much better to tell people to never do something which is very rarely useful. People who know better would know when to ignore that warning (which I would hope would be the sort of people who would write a CI or FaaS), while those who don't know better likely wouldn't use it in a way that is "safe".

The blog post you link to is quite old (this was at a time when most users were well aware of what docker.sock did -- so much so that vulnerabilities I helped find in Docker from that time were not regarded vulnerabilities because they required docker.sock access!). I agree with Jerome's point which was to dissuade usage of Docker-in-Docker. His point was not that bind-mounting the docker.sock is generally an okay thing to do -- and as I said I think that we should be far more vocal about how dangerous this is (because people don't listen otherwise -- as has been shown by the fact that there are still plenty of users that have Docker listening on a TCP socket without client certificates).

> BTW there's no escaping the container when you're doing this intentionally.

I don't know what you mean by this -- if you bind-mount the docker.sock inside a container that container can trivially get root access on the host (AuthZ plugins can make it harder but as I said they are rarely used and cannot protect you from sufficiently clever attackers). My demo with 'mount --bind' was just to show how it worked, the same thing happens with '-v' (which is just a bind-mount under the hood).

Now, if you argue that the code in the container is always something you trust (which I think is a questionable assumption as it assumes that your code is not exploitable) then sure -- if all the code on your machine is safe you have no worries. But then the obvious question arises -- why do you need the isolation properties of containers in the first place? Why not just run in a chroot?
We can detect elements in other star systems. Earth elements are pretty standard, it turns out. Interesting idea though :)
what if there exist ultimate limit to knowledge itself and laws of universe that can be discovered? it would imply that any civilization that reaches that point will have nothing to gain from communication with other civilizations.
> Similarly she was towed from in front of our house for not moving the car very frequently

You are storing personal property on public property. Move your car according to the law, or pay to park it (in a lot or towing fee, I dun care). Entitled people are ridiculous.
Oh, I wondered why that happened.
> Maybe because the latter is (or seems) less brutal
Or maybe not [1] [2]

[1] - https://www.theatlantic.com/international/archive/2018/08/sa...

[2] - https://www.businessinsider.com.au/saudi-arabia-crucified-ma...
link to the wiki for a noob?
No, it would not catch that, because it's not tracing elements through the AST. It would be possible to do some amount of tracing, but it would be impossible to catch and modify all variants of that, since Python is an extremely dynamic language. Imagine something like:

attr = "foo" if conditionA else "bar"
obj = A() if conditionB else B()
if hasattr(obj, attr):
...

Because of this, Bowler is focused on being more practical, and leans on the expectation that an engineer will be in the loop and validate the resulting diff, run unit tests, etc.
This sounds largely like strawman examples to justify being paternalistic. The fridge in the break room has exactly the same risk as the one in your office; injury to the employee is a far, far greater risk than busting somebody's stapler; standardized workspace is one of those pointless conformity things that deliberately ignore differences in job function, personal preference and on and on.
SETI more expects side-effect radio emissions than purposeful communications. It was started at a time when powerful radars [1] designed to detect ballistic missiles were deployed and this radar's emissions are definitely detectable several light-years away.

It relies on the same mentality as the Fermi Paradox: it expects that an advanced civilization will master so much energy that its waste should be visible from afar. Only recently have we started considering that efficiency, rather than wastefulness, may be the hallmarks of civilization.

But yes, everybody at SETI knows that what they are doing are stabs in the dark. It is like trying to find inhabited lands by looking for tam-tam songs along the coast or to check if there are lighthouses installed where people may have switched to GPS.

Still, if there are thousands of civilizations out there, you can bet on off-chances of detecting one. The odds are low but the rewards would be huge. Fewer discoveries would be as consequential as this one.

[1] https://en.wikipedia.org/wiki/Duga_radar
If FTL is truly impossible then it doesn't seem like there is much point in listening since everything is so incredibly far it's irrelevant even on a species-level or planetary-level time scale.

Probably true on a species level, but you are vastly underestimating how long a planetary-level timescale is. A von Neumann probe could cover the entire Milky Way in relatively short geological time.
Most people buy Google phones specifically because they want Google to remotely manipulate their phones as quickly as possible with the latest Candy-named software. It's an in-demand feature.
That just sounds like good-old attempted murder. I hope the DA pursued it as such.
Bose SoundSport Free Wireless Headphones Review
Not requiring explicit parameters for things like domain, etc in this day and age is just ridiculous.

I expect PHP5 to be that way. php7 and golang doing that, in this day and age, is inadmissible.

Yeah you should still be able to write a quick hack and make it work fine without worrying about security, but the language/framework should at least make you explicitly say "set this cookie, and allow all domains and client side access. fine".
Lots of great advice here. In addition to "use prolog" and "play with ometa/ohm" - you might want to consider looking at a ML - like ocaml (used for bootstrapping rust) or standard ml, sml.

Another approach is to look at rpy - the restricted python subset used for pypy, see for example "other languages" on:

https://www.pypy.org/features.html
That's true, but somewhat dependent on which currency the debt is denominated in.
I'd say that "apps as first-class objects" was the real innovation. My first thought on seeing the iPhone demo was that having Phone as an app made so much sense! Every other device at the time seemed to treat apps almost like plugins running on top of a phone/productivity-centered OS. In iPhone OS, practically everything you did was neatly encapsulated by the round-rect of a friendly app on your home screen. The App Store naturally followed from this approach.
Infrastructure in the US is really old and very dangerous. 100+ years old and ready to fall apart. Sadly, not really surprised.
The web link to google often doesn’t work to find the non paywall version anymore. I’d be happier having a setting in my HN profile that ghosted these publications.
Paywalled.

http://archive.is/xKX1T
Having both flown planes and driven cars, they are definitely not.
The challenge was really nice and interesting. How often do you check the winners? ;)
Sure. But I think he's describing a massive mindset change w.r.t. zoning.

Basically, something similar to the Japanese blacklisting approach (everything up to a certain use is allowed) vs. the incredibly specific North American whitelisting approach (this area can only have big box stores, vs. this one which can only have small storefronts). http://devonzuegel.com/post/north-american-vs-japanese-zonin...
Ask HN: What's your email strategy when you register for a new web thing?
Hello.
When I'm registering for a new service or some website with my email, sometimes I append thing like "+uk" so "example+uk@gmail.com". This is fine, but not perfect.

I want to start using my own domain email, and I am wondering how to go about doing this. I could just use the one email one my domain, or keep doing the "+" thing.

Another thought I had was make aliases like "hn@mydomain.com" that point to my one email.
The last idea I had was to make my one email the catch-all, and just do as above, using "hn@mydomain.com" without the need for an alias creation every time.

What is your strategy? How do you do this, what do you suggest, and why?
> with google moving faster then the spec

What does that mean?
At most one guy from finance will be involved to rubber stamp the budget for the quarter.
12 Brilliant Things You Can Do with Your Smartphone That You Never Knew
That's reminiscent of issues re Google nuking accounts.
It's not used to run anything critical.
No one. That's the joke.
The solution is for Firefox to fix their broken performance. I don't understand how all comments make it sound like this is a problem with Chrome.
My knowledge here comes from the film Big Short so take that with a grain of salt lol, but they explained it as a step beyond what you describe in that a synthetic CDO as more a bet or insurance on the underlying bundled debt. So like placing a bet of $1000 that the $100 debt owed to alice wont default.

https://www.youtube.com/watch?v=EEXTqtH-Oo4
https://en.wikipedia.org/wiki/Synthetic_CDO
CRM Singapore
the last woooden pipe in Philadelphia:

https://www.politifact.com/truth-o-meter/statements/2010/sep...
I bet this is what you are looking for:
https://www.amazon.com/Compiler-Construction-Using-Java-Java...

This book taught me how to write a compiler and build a programming language of my own.

To answer you question "where and how did you start?": This is where I started learning about compilers and programming language implementation.

Here is its description from its website:

* Comprehensive treatment of compiler construction.

* JavaCC and Yacc coverage optional.

* Entire book is Java oriented.

* Powerful software package available to students that tests and evaluates their compilers.

* Fully defines many projects so students can learn how to put the theory into practice.

* Includes supplements on theory so that the book can be used in a course that combines compiler construction with formal languages, automata theory, and computability theory.

What I promise you with this book: You'll learn how to write your own programing language. Not only how compilers and about the language but also about computer architecture. This book is very easy to read and understand. It starts with very basic topics then slowly building from it until you'll grok implementing the language given the specification. You'll have the chance to build a compiler from scratch or by using JavaCC and Yacc.
There's history here.

Note: sheriffs of London paid 300 £s per year, hoping to make a profit from the fines they collected.

A labourer's annual wages at the time were 2 £/yr.

A master carpenter might earn 20-40 £/yr, depending on days worked.

A kitchen servant, 2 - 4 shillings/yr.

In: "List of price of medieval items"

http://medieval.ucdavis.edu/120D/Money.html
To be fair, there were liberal nobles who wanted to ditch their titles and make the system more meritocratic (with the subtle acknowledgement that nobles could afford education). America’s favorite Frenchman, the marquis de Lafayette, was one of them.

They just weren’t very effective at defusing the time bomb.
People who weren't there don't know, and this is why they don't care either.

It's exactly the same with Google, they have become the Microsoft from before, being bad guys.

Slowly people are seeing it but they are not going to help by switching browsers it seems, so we are doomed to repeat this.
I'm not that certain. From my understanding this works through Google play services that most people will install on other roms as well
Python Cx_Oracle 7 Introduces SODA Document Storage
German cargo handler LUG reshuffles management structure  – Air Cargo
It seems like the attack is not completely quiet as an error is printed while installing a modified package, either from compromised mirror or by man-in-the-middle:

ERROR: ${package_name}: BAD signature

Remote code execution will happen, but at least you will get a warning that something suspicious is going on.
Flash has never been this smooth.
>the drivers who practice safe driving techniques and do not drive distracted have something crazy like a 3-4 fold lower

That's quite the qualifier. Problem is I see at least 3 people with their eyes on their phone during every 30min commute to work ...so...

>When the "worst" AI's that are responsible for some amount of crashes, who is going to pay the price? Whose license is going to get deducted? Whose insurance is going to go up? In the world of driverless ubiquity, who is going to be the check and balance? What self-selecting mechanisms are going to protect us? You think Waymo will give a shit?

These are literally the least difficult issues around self driving cars.

> There are other reasons this argument is fallacious, the most obvious one that driverless cars have not yet proven they are safer or can remain statistically significantly safer than safe human drivers.

so we should stop trying?
There was an episode of Radiolab about another neurodegenerative disease, Progressive Aphasia, and how it affected to the creativity of some people. : https://www.wnycstudios.org/story/unraveling-bolero
> they have boot up sound

Where did you learn that? I 1) didn't think they did and 2) even if they did the bootloader should be user replaceable. I could be wrong though..
Maybe not perjury, because DCMA takedown requests aren't sworn testimony. But this case isn't even about DCMA. It's just Facebooks takedown service to avoid DCMA invocation.

I'm not even sure who the victim would sue here. Facebook or Sony? Both, I guess, and let them sort it out ;) And yes, maybe in small claims court.
Interesting if you could feed information from drones and various other sensors directly into soldiers brain. Maybe this information, with enough practise, could merge in brains with data from your own senses.
Really good suggestion
Nothing about using Docker for this makes sense. I’m sick of administrating clever Docker projects because apparently installing nginx on its on (which can easily be done with Ansible or Salt or even a shell script at this point) is too much to ask to host a static website. Those of us who live in Opsland hate maintaining all of these half-baked wheel reinventions.
The Thing is, in today's physics experiments at that scale, you cannot distinguish the amounts of work. Basically everyone in the collaboration will have a non-zero share. A paper about a specific analysis would not be possible without the people who designed the experiment, build it, maintain it, do the actual data taking, wrote the analysis software, do dev-ops in the data center etc etc etc.

So there is only one fair solution, list everyone in alphabetical order.

And if two LHC experiments publish together, that's > 2000 people.
Looking to launch new ride-hailing venture in your location?
HTTPS-Portal: Automated HTTPS server powered by Nginx, Let’s Encrypt and Docker
I just bought some more 'vice' last week mostly because I have this fear, probably precipitated from Trump + a BUNCH of for sale signs popping up when I almost never saw an actual sign go up over the last 5 years. I assume I'm not the only one afraid although consumer confidence seems to be up as of August at least.
What is the incentive to pay it off at all, if it will be forgiven in X years?
Highlights from 2018 Iphone Launch event
The rate of change of javascript frameworks and tooling. Need to learn a new one every year roughly. And dump all the working code and knowledge gained next year.
Isn't that what document fragments are for? If your changes are all one tree you can build it then insert it all, right?

(Or set inner html? :-)
Thank you for sharing this, I think many ppl are happy for every example and code snippet they can get.

The configuration hassle with HAProxy however let me switch to nginx and traefik in the meantime...
I have been trying this since the book came out...

I've never been able to get a successful low-maintenance business going, what kind of business did you start?
Here in our Seattle bedroom community the gas people are phenomenal, and they deal with every leak, no matter how minor. They will come out in the middle of the night without being asked twice. I am thankful.
I don't see WHS the the big issue is. Yes my phone went to red battery low power mode. So what? What aspects of this alter contract between me and Google over automatically applied updstes? I gave can implicitly ages ago.

If they involuntarily disabled battery saving and caused me to loose service or drain and reduce battery life i could see an issue.

Truly, bemused at the hate. What did you think the t&c said when you enabled updates?
I have a theory that the largely unregulared street food culture survives due to how rare it is for people in cities (in particular) to cook for themselves.

Firstly, you have a large population who are going to purchase food several times a day. That means a food vendor can potentially establish themselves in single location or a neighborhood and build a base of repeat customers, customers who may purchase from them several times a week, if not every day.

Beyond that direct repeat business, regulars will order from their favorite vendor even when they have no queue of waiting customers. That initial group of regulars around a vendor waiting for their order sends a strong positive signal to other potential customers who may not usually buy food in this area. If you dont know the vendors, buying from a vendor with no customers is a risky move.

Next, because buying meals is such a common part of everyone's life it becomes a common conversation. That provides an additional chance to reward quality vendors while punishing low quality vendors.

That environment strongly punishes food vendors that make their customers sick in particular. Your regulars will abandon you and bad mouth you to all their friends and coworkers.

Meanwhile, in the west mobile food vendors rarely have that kind of repeat clientele. Most customers will purchase food from them precisely once. And even if you complain to your friends, chances are that so much time will have passed before they encounter that vendor that they will have forgotten the conversation.
To protect the banks customers.
What Ötzi the Iceman’s Tattoos Reveal About Copper Age Medical Practices
No, I've been tangentially involved in this sort of decision from the management side in Serious Industry. The break room fridge is "known to the corporation" in some sense and can be assigned an inspection or even maintenance schedule if you have the expertise. Has more eyes on it for trouble in any case.

We had problems with people bringing knives in to de-core their apples. Every year there'd a nasty hand injury or two, and we were under pressure from upper management to keep our injury statistics low. Since hand injuries were one of our major problems; knife ban! :D

It was as effective as it was unpopular.
Wings To Awakening by Thanissaro Bhikkhu.

I was always interested and had a vaguely interested in Buddhism, but this book laid out everything about it nice and clear(well, in dense language at times), almost like paint-by-numbers. Everything just made sense from then on.
There was an interesting study recently that showed prediction markets actually did a better job of determining 'fake' papers than journals in social sciences. [1][2] A group of researchers took some 21 papers published in Nature and Science from 2010 to 2015. 13 were able to be replicated. The prediction market accurately determined all 13 predictable papers, and 5 of the 'fake' papers. They gave the remaining 3 about 50/50 odds. Though one thing to be said there is that even in studies that they managed to replicate, the effect size was found to be, on average, 50% of the stated effect size.

I think there's long been a perception that social sciences are heavily influenced by people who take whatever their biases are, create some experiment specifically designed to show them, and then play with the numbers or experiment's parameters until they manage to do so. This goes all the way back to (and certainly before) Zimbardo's Stanford Prison Experiment. There was nothing organic there. Participants, both prisoner and guard, were heavily coached on how to act and, in their own words, saw the experiment more as an acting role than emergent normal behavior. It seems to be that this perception is accurate.

In a society where people are increasingly radicalizing on social views, we ought expect social sciences to become even more dysfunctional in the years to come. This sort of stuff is, in turn, casting a very dangerous cloud over the rest of science since people tend to extrapolate these actions and behaviors in the social sciences, to science as a whole. In my opinion we need to start creating a strong distinction between science driven by science that yields falsifiability, predictability, and is driven exclusively by direct experimental result -- as compared to not-quite-science that is based on models, abstract experimentation, is not falsifiable, and does not provide meaningful predictions. What I mean by meaningful is that the whole point of predictability is not to have something to encourage political action on as is often the case in social science, but to use as a litmus test for the accuracy of a hypothesis. If it's true then that provides strength to the hypothesis, if it's false then the hypothesis is false. Without falsifiability, predictions are worthless.

[1] - https://www.bloomberg.com/view/articles/2018-08-30/predictio...

[2] - https://www.nature.com/articles/s41562-018-0399-z
Yeah. I was a Flash programmer back in the mid 2000s, and GSAP is what let us move away from Flash and onto JavaScript with a similar set of abstractions. The best animation system I’ve used for the web; and amazingly performant.
You've put into words exactly what I was thinking.

From the thread:
"Ok, but how is it that you have the power to control our phones this way? "

Christ buddy. You have a phone thats made by Google. Google, the company that tracks you everywhere and rolls greenfield updates on all their other software. And then this person says they're going to turn 'allow modify system settings' off... What do these people seriously think Google is going to do?
Ikea is quickly shifting to a zero-emissions delivery fleet
I'm a big fan of Julia, but I wouldn't say that it's a great introduction to programming. Python is the way to go IMO, unless Julia really takes off.
I guess it depends on how you view your phone. Is it your phone or is it Googles phone that they can update with whatever software and settings they want to.

The same debate is around Windows 10. Some people are fine with Microsoft getting a stream of privacy data from them. Others feel it's their device, not Microsofts.
Vidmate Old Version
Whereas it was 60FPS, perfectly smooth and quick loading on my iPhone SE. Weird.
> and also sync your data back to their cloud which probably is resold in some derived form to advertisers.

And to the Chinese MSS perhaps?
Not likely. There are tons of webgl demos out there, performing quite advanced tasks, well beyond what this game is up to, and Firefox and Chrome produce equal results.

Example: https://zenphoton.com/

My guess is there's some sort of misplaced network hook, introducing latency into OP's event handlers, and it's producing a noticeable side-effect in Firefox, which, perhaps Chrome optimizes for, as a common, anticipated programmer tendency, that gets re-ordered behind the scenes.
Agreed. I do this and I pay around 5 cents a month. Can't imagine wanting to run Docker for a simple static blog.