skysight-inc/HackerNews huggingface dataset:
> Containers are basically a few syscalls wrapped in a ball of mud

I don't think it has to be; I mean, the current Linux/Docker situation is kind of that, but that's just a single implementation.

> most containers are bundles of software (multiple binaries)

Yeah, exactly. Containers aren't just about security, also convenience. Something like "docker pull someimage" can be a handy cross-platform way to run stuff.

I think "docker pull" is the reason for Docker's popularity. You can build a self-contained container containing Ruby, all your Ruby on Rails stuff and JS stuff, and whatnot, and then send that to any server and just "docker run" it. Getting some of this dynamic stuff to run can be tricky and error-prone: need to get the correct Ruby version, Rails version, muck about with bundle, etc.

Want to add a new app-server or migrate to somewhere else? Need to spend a day setting everything up again and hope you didn't make a mistake that will bite you later :-(

A self-contained container is a lot easier, even with good OS package management or automation tools like Puppet.

Many people also use Docker as "Vagrant" (e.g. to run dev versions or tests and whatnot). Again, "docker pull" is convenient here, especially when there are certain dependencies/requirements, or for running testing against different versions of some dependency, etc.

Again, I don't think Docker is very good as such, but I do think there are some ideas worth keeping, both for security and plain convenience (not often those two go hand-in-hand!)
Even when they do own, property taxes can often force them to sell at a discount to avoid disastrously high tax bills.

This was part of the selling point of Prop 13 iirc, although certainly not the real purpose.
It does seem like a glaring omission, especially at the modest database sizes they used.

Even something like PG with the Citus extension to compare parallelism would have been relevant.

EDIT: Although another comment suggests that the data for the paper could have been gathered as long ago as 2016, which could mean Citus was not yet open source.
Worthy of note,

https://en.wikipedia.org/wiki/Apple_IIGS#Influence_on_later_...

https://en.wikipedia.org/wiki/Snow_White_design_language

https://en.wikipedia.org/wiki/Hartmut_Esslinger
Looking in as a renter, HOAs just look like a giant pile of petty corruptions and abuses. I’m amazed anyone puts up with them.
With you there, though I didn't start with the Sinclairs. Videos are such low bandwidth compared to listings in the back of a magazine with an article breaking it down step by step, or figuring it out from reverse engineering and messing around the memory map. With nowhere to turn for instant answers you had to. I'm glad I did.

YT works for game reviews, and the odd conference presentation, for everything else I'll seek out a post.
They simply don't, and are unlikely to every comfortably do so due to how custom the hardware is getting (ie, the keyboard is a SPI device).
Would also double the record for number of vehicles involved in an incident too, I believe
Given that many first world nations now avoid the US for data storage due to surveillance overreach, your statement comes across as rather ironic. As a Canadian, the US is definitely not the pinnacle of open democratic government. Your view of the US is a very US centric view.

There is certainly a line somewhere, selling weapons for example is a pretty clear one. But this line hasn't been established on the data side, and I don't think the US is in a very good position to establish it given its poor track record in this area. But to the extent this line is written, it should be a law applying to all US companies, not cherry picking Google or other politically unfavourable companies.
If I am understanding correctly a sort_order column would work as well. Essentially then you can just do select with order by sort_order.
The thing about the ability to take bigger risks is that it isn't very often noticed or acknowledged by the risk taker since it doesn't seem that apparent that there was a safety net that allowed the risk-taking. The risk taker feels that they would have done it anyway, whether or not that is true.
You are right I don't understand the down votes.
Rancher (2.0) certainly made it a lot easier for me as a sole developer to get Kubernetes running in an actually useful way.

Though I’m still running into a hundred gotchas a month :P
Not necessarily, the modem, or telematics unit can be anywhere in the car and communicate with the infotainment system and other modules through a data network just like you can have the cable modem in your attic and a an ethernet cable to your desktop.
Are you saying google's looking at your current location? That sounds to me like it's saying the store is an x minute drive from your home. It says nothing about your current location (work).
Mikrotik suffer from a gross amount of "Not invented here" reinventing existing open source protocols such as OpenVPN, a custom sshd and web server, and it shows with their amount of issues (how many years has it taken to add UDP to their OpenVPN server?). In some ways I think their no better then UBNT in some ways.

Tell you what. I used to have a Mikrotik CRS125 switch in my home office, and by default if you have a set of ports where one has no VLAN assigned, and the others have untagged VLAN assignmnets, any broadcast traffic on the untagged port(s) without a VLAN leaks to the ports with an untagged VLAN. This isn't well documented in the manual, and to fix it you either disable "Invalid VLAN Forwarding" (I think) and/or move said ports without a VLAN to a VLAN.
They talked about you during the Bitcoin boom.
Are you turning off GPS or all location? Because location can still be enabled when GPS is off. There's location via wifi and via bluetooth.
I think there are a lot of conditions and issues with trade and China, and I'm not sure how the US government deal with them all, but I agree one rule for Google is a TERRIBLE idea and precedent.

Semi-related, how weird is this https://twitter.com/amlivemon/status/1002044167793594368

> As a condition of China joining the WTO in 2000, Visa and Mastercard would be allowed into China market. 18 years later, China has lost a WTO case on this subject and Visa/Mastercard are still not allowed into China. That's just for starters. Don't believe China on trade deals.

China and trade is a real quagmire.
My startup purchased Meraki, and we don't have to deal with many of these issues. We also paid an electrician to do wiring and crimping. SDE time is expensive and we want the team focused on building our product, so we made the tradeoff to pay more for the network gear and installation. As a result our entire team, engineering and everyone else, has network access that "just works". This was true when the 35 person team showed up at our last office for the first time, and continues to be true.

The configuration is done through a hosted dashboard that also provides monitoring. We're in a heavily regulated field, and the Meraki dashboard provides a lot of evidence for compliance audits. It also enables us to remotely control devices (e.g. lock, wipe, locate) and ivestigate issues when integrated the Meraki MDM solution.

We did have to tune the bitrate for wireless.

We also cannot setup redundant VPN tunnels to AWS (Meraki only supports one tunnel for non Meraki VPNs), so we have to do manual faiilover. This is my biggest gripe with Meraki. We are investigating adding a Cisco ASA to handle site-to-site VPN to AWS with redundant tunnel support.
Hey, this is a great contribution. Thank you for making it.

I run one of the more popular readers and I have to ask why wasn't NewsBlur included in your list. It's the oldest on that list for one. It's also got its own native client on all of the platforms. Plus, I'm a HNer and NewsBlur launched on HN as well.

As somebody who has been introducing people, in person, to the concept of RSS for exactly a decade now, I'll mention that for those who really haven't heard of it, which is 10% of folks in tech and 90% of everybody else, my strategy has been to compare it to an inbox for websites with filtering and sharing. Really hits home on the idea that every story shows up unlike the dominant competitor to RSS which is FB/twitter.

95% of the people who leave RSS, and I ask everybody who cancels why they're canceling, leave it because they get their news from social media. Social filtering provides a higher signal than the manual process. I don't blame them.

Personally I built in that serendipity into my reader because I think it belongs in a news reader, but as its own feed among many.
It is still experimental, but the output code is stable -- most of the work is in expanding its support for the Tcl language.
>the people and company that made you a billionaire

Way to try to take credit for all the value the WhatsApp founders created. I think this FaceBook guy has got a new winner in his own boasting game about having found a new level of low class.
The second sentence adds nothing to his argument besides adding in a snide criticism with a trailing ellipse. That's passive aggressive to me.
Stallman claims that once code is licensed under the GPL, it can't be revoked:

https://news.ycombinator.com/item?id=18081199

Which kind of makes sense, since anyone who currently has a valid license to use the code (anyone running Linux) has all the source and can legally redistribute or modify it, based on the terms of their current license.
Converting some streets, or even lanes, to bus-rapid-transit, could greatly improve things. The BRT on Geary has been slow and horribly managed, but I have a feeling that the current mayor can push things along a lot better if she stays on.
https://www.uspto.gov/trademarks/soundmarks/74309951.mp3

It's linked from this page, which has some other fun sounds: https://www.uspto.gov/trademark/soundmarks/trademark-sound-m...
That's not only false, but obviously false, since it's an extreme oversimplification of a situation with many players, competing interests, and so on. You won't find any serious scholar taking that naive a view, though plenty of journalists do. The question is where this fantasy of an evil monolith with a spidery mastermind comes from.
I'm a guy in tech. Most of what she says applies to men and women.

> At my last work week, I worked 14-20 hour days, five days in a row.

Man or woman, you are foolish at best to do this to yourself. Everything you do sets expectations. If you work very long hours without being compensated, then people will expect you to keep doing so. If you say, "yes" to everything, then people will expect you to keep doing so. Not just work people but family and friends too.

> “Why is this my job?”

It isn't. It was never supposed to be. Your job is to do what you think is in your and your company's best interest. There are plenty of men that are complete doormats. The reason women get away with complaining so much is tied to the reason why they're thought of as bitches for standing up for themselves. Men don't get to complain - they get to be stubborn. Even though it is acceptable for men to be stubborn, it makes others less wanting to work with them. Instead, I'd suggest becoming a better negotiator. There is a book called "getting more". It is a great book. Everyone should read it.

> Can you be healthy in a toxic, sick environment?

Yes you can. Do your job as well as you can. Keep it professional. Go home on time.

> Don’t work for frightened people, especially adults who are children.

Wholeheartedly agree. Here's a tip: never take a lower salary in exchange for more equity. Your salary should always be market! The equity is what you get in exchange for the risk of working for a child-run startup. If you do plan to give up some salary for more equity, then shouldn't they be willing to let you earn it without a cliff? You're obviously investing in the company by giving up salary.

> Practice saying “That’s none of your business.”

Yes. Oh wholeheartedly yes. Not only are vacations none of their business, sick and personal time off are also none of their business.
Ask HN: What Would It Take to Make an Open Source Google?
Having little experience with search engines, I wonder whether it would be possible to create an open source alternative to Google? I applaud, for example, DuckDuckGo for serving as a privacy-focused alternative to Google. But at the end of the day, to paraphrase Vitalik Buterin, I believe "can't do evil" beats "don't do evil".

Could the execution and runtime of said search engine be powered by blockchain/cryptocurrency tech? There are several existing technologies like Sia that decentralize file storage. Or are other technologies better suited?

What are other challenges of operating a search engine? Regulatory compliance? Ethical scrubbing of results?

Would this solution be tenable or does search lend itself too much to a centralized entity like Google?
>Google can just take down your blog any day if they feel like it.
That's just the best case scenario. They could close your email, locking you out of gmail, youtube, and any other service tied to the registered email.

And then since Google has been tracking related emails, they'll close those too.
Not anymore, at least on modern Intel - lea instructions go through the ALU like other ALU instructions.

It's still an advantage over mul in this case, because it is a so-called "two component lea" which only has two components (base reg and index reg) so it takes 1 cycle latency and can execute at a throughput of 2 per cycle, versus 3 cycles latency and 1 per cycle for mul.
I lived in NYC for five years, and got to know the city quite well by bike.

Things I noticed:

- Brooklyn has undergone an incredible amount of change

- 14th & 6th midtown area maintains a lot of its image

- The amount of change on the west side is uncanny. The Hudson Yards etc.

- Save the Pearl st. area, the financial district still looks like it did
Cognitive dissonance explains it. I don't have a billion dollars. Is there something wrong with me? No, the billionaire is evil.
FWIW, MATLAB does a lot of this kind of optimization in its internal implementation of the core datatypes. There are a lot of smart compiler/JIT people that have worked hard on it over the years to optimize the internal guts despite the naive design of the language due to its age and some poor design decisions made ages ago that cannot be changed due to extreme backwards compatibility requirements. Kind of like javascript and V8/SpiderMonkey :)
Linea App for iOS does this. If you have an iPad with an Apple Pencil it's awesome.
I'm working on some pretty massive things right now. I should have something to show December (DockerCon EU) time frame. It's all in the area of state management. This is something I've been working on for quite some time. The hardest part of an orchestration systems is the persistent store. I'm working on some patterns to effectively remove the need for database but use only object storage (which is significantly more reliable, cheaper, and easier)
You mention a lack of hosting but would it, optionally, browser-sync?

I use a web interface, The Old Reader, to access feeds from 4 devices. Whichever I'm using at the time knows which articles have been marked as read; without using a different client for each OS platform.

So a browser extension that syncs to one's Firefox account, like the bookmarks/history feature would be handy, with no additional hosted service other than having a browser login.
It’s also a matter of signal to noise. Not very many things (other than neutrinos) are detectable when you point a detector straight down into the earth. Contrariwise, you’re swamped with signal when you point a detector at space.
Ya just because I make most of my money selling hamburgers doesn’t mean I’m ignoring my regulars who come in for milkshakes.
Already is a thing, has been for a few years now - https://www.inc.com/wanda-thibodeaux/heres-why-pizza-company...
App development company
https://adplexity.com/

Current revenue: 10,000,000 USD yearly

Cost: 100K USD yearly

Scrapes ads using python script and celery, lists the ads on a webapp for indexing/search and sells data to other advertisers.

Lemme know what can be done better.
It was never sexy to work on container runtimes, and nobody is losing their minds over orchestrators either. There was a real need for a platform to deploy to without being tied in to {aws, gcp, etc}. First it was OpenStack, now its kubernetes.
One minor nitpick - just tried to sign up, and if I was a USA user, then your page would have unhidden the pricing buttons. but as I was UK user, it did not unhide anything (not even a sorry!). As such i was left with the default waitlist boxes, and was confused as to whether I was signing up or not.

(it's possible it did unhide the sorry, but it was not clear on the smaller screen... maybe a splash of colour? Perhaps "Sorry based on your selections above we don't yet offer the service in your country - sign up below for notifications." You kind of do say that but like I said confused)

Anyway it looks a great service, and I am now on the wait list
Google Docs EULA is predatory.
How to Create a Great Profile on Old People Dating Site
On an unrelated note, what's the monitoring software you've been using on the right ? It seems quite nice.
In case you don't know, Y Combinator sold about half of its holdings(Dropbox) to other investors at around the same time as the series B financing round led by Index.

That’s the only time that Y Combinator has ever sold any portfolio company’s shares in a secondary transaction.

I don't understand why YC did that? It seems like not a good move.

Source: https://www.recode.net/2018/3/22/17150770/sequoia-dropbox-ip...
I loved the ubiquiti stuff for years. Then one day two years ago macs suddenly could no longer reliably connect to the outside world even with a strong wifi connection to the AP. I would send pings and have 40% packet loss. Weirdly I could ssh into any of the APs and ping with 0% packet loss.

We could never fix it and switched over to google appliances. We rarely have over 20 people in the office.
Since these are round and they're going for jagged sand, probably not?
Interesting attack, but likely impractical.

- Iterating over all internal IPv4 addresses to try attacking them isn't that expensive, there are about 16 million IP addresses, and there are likely patterns in their allocation if your goal is an internal network.

- `HashKnownHosts yes` is not the default setting.

- Shell history likely leaks the hosts anyway if you enable this SSH setting.

- You could substitute `ssh` with a malicious version of it.
Censorship – 1984 dot now (2017)
> If you were using Google's cloud, nobody in the comments would know or care

I would. Deeply unhappy with all the fashionable reliance on external monoliths as a matter of course. Whenever I have the choice, I simply discount technologies that can't stand on its own legs. I would not trust Google with my shopping list. Why would I trust them with a website?
please stop being patronizing. all you've done is attack my character.
And you think the average accountant is in a better place? Accounting often requires long hours (seasonally), and isn't usually particularly well compensated.
Here's the latest Unbox Therapy video on this with selfies taken on an iPhone X, Xs, XS Max, and 6. There's definitely something happening. https://www.youtube.com/watch?v=Q3GGdtn9poo&
Where would it be stored these days to be publicly accessible? Microsoft owns GitHub and I bet it made Torvalds unhappy.
Ask HN: Does programming have any value outside of electronic systems?
For lack of better words, outside of the concept of electricity.
Someone's been searching for cellulite cream on Amazon!
Yeah that's feasible, I haven't experimented with it yet.

Personally, I find that I read very different things on my laptop than I do on my phone (technical articles vs. news) so I haven't had a huge motivation to investigate it, but it's an interesting avenue. The only possible stumbling block is that the size of sync'd data is relatively constrained, about 200k I think, which is probably enough to hold a user's feed list and track whether they've viewed/ignored various articles, but it would require some planning.
A lead investigator on this is also with Bellingcat

https://www.twitter.com/Yaolri
> Marzipan apps are ugly ducklings. As soon as you use them, you can just know these are not at one with the system. You detect that there’s a translation layer of some kind at work here, just like when you use Slack on the Mac you instinctively feel that it’s a web app in a thin wrapper. The underlying implementation is exposed to the user with a bevy of performance sluggishness, UI quirks and non-standard behaviours. That’s bad.

A thoughtful critique, including screenshots and interaction details.
Provisioning AWS network using terraform modules
There is nothing wrong with being a white male nor with being 6 foot tall. But maybe there is something wrong when white males are overrepresented (in my opinion there is).

Also, there is no historical bias towards 6-foot people. But there was, and is, a lot of bias towards white males. For me it's fair enough to call that out.
I've heard great things about Ubiquiti's products, so I recently evaluated both their USG security gateway and EdgeRouter4 products using only wired gigabit ethernet.

I found it weird that the UniFi line of products and the EdgeMAX line of products while very similar in terms of specs and their target markets, use completely different remote management systems (UniFi vs. UMNS).

While some really folks like their management GUI, I found that once you wanted to do anything not bog standard with it, you were on your own. I had to SSH into both devices and enter EdgeOS (Vyatta) commands for even relatively simple things like disabling NAT on the ER4 or configuring mutual TLS with OpenVPN. With IpSec there are so many different possible parameters that the GUI just didn't have enough widgets to cover them all.

I found the USG security gateway too underpowered for my purposes. I wanted a device I could use for IDS/IDP as well as a dedicated VPN. With hardware offloading disabled (which you need for IDS/IDP) the throughput of the USG is limited to around 130 Mbps.

Using IpSec on the USG (ESP:AES-128-SHA1) I was able send (encrypt) data at 70 Mbps and 56 Mbps on receive (decrypt). Don't even think about using OpenVPN with this device, as it's single-threaded and can't take advantage of any crypto offload -- only managing around 14 Mbps of throughput.

If you are using the USG for a VPN you can get much better performance with WireGuard. I managed to get 90 Mbps encrypt, 111 Mbps decrypt with it, which is likely good enough for a lot of folks.

The EdgeRouter4 was faster, but it had a weird issue with IpSec. I was able to get it to encrypt at 631 Mbps, but only decrypt at 229 Mbps. On encrypt (send) I could see that the CPU was 376% utilized (it has 4 cores) with most of that spent dealing with software interrupts. On decrypt (receive) it only 167% utilized -- so something was wrong there.

The EdgeRouter4's OpenVPN single core performance was more than 3x faster than the USG, clocking in at 43 Mbps, and best with WireGuard at 636/597 Mbps encrypt/decrypt.

I used iperf3 on a remote host on my simulated WAN for measuring throughput like:

iperf3 -c host_behind_router -P4 -t120 # decrypt
iperf3 -c host_behind_router -P4 -R -t120 # encrypt

Ultimately I found the whole dance of having devices being adopted by the controller software and then being provisioned by it to be tedious and unnecessarily faffy -- especially considering how often I had to drop into EdgeOS to get things done.
Smart guys.

At some point in the very near future you are going to end up rotting in a grave. 850M will not do you a lick of good then.

Live your life, don't obsess over the zeros.