skysight-inc/HackerNews huggingface dataset:
Here's an article from 1981 fearing the impending effect on soil loss in the U.S. due to expanded global exports of wheat, corn, and soy. https://www.csmonitor.com/1981/0603/060350.html

Nearly 40 years later...doomsday has yet to arrive.
Not that this shouldn't be patched and all, but this seems like it is being treated with more urgency that is required.

If I am understanding the CVE correctly, you need to be able to launch privileged containers with an attacker-controlled image where the container user is root and not namespaced (i.e., the same root as the outside root user). How is this not "on the wrong side of an airtight hatch[1]"?

Am I missing something here? If you can start privileged containers, why not just execute evil.exe directly?

[1]: https://blogs.msdn.microsoft.com/oldnewthing/20060508-22/?p=...
> comptime means what it says: anything marked as comptime will either be known or calculated at runtime.

Umm...

Please don't let the quality of this article's presentation turn you off of Zig, it actually is pretty great.
I am at the point where I cannot keep track of Google communication products at all.

Wasn't Google voice already their virtual phone number service?
Are you claiming only math majors are capable of understanding statistics and therefore should be the only people legally entitled to make decisions?
So that means the Patriots will never have an important call go against them. No thanks.
Do It Yourself (OpenJDK) Garbage Collector
Google Software Engineer Design Interview: Reservation System
For development box, is the single thread performance on the AMD system really something you'd notice? For a production system you'd ideally pick the CPU architecture that's best suited for your work load, but most of us just go with "what ever is currently under our hypervisor".

In my mind you're doing something incredibly specialized if you notice the difference between AMD and Intel, or between current generation and last generation CPUs. Video encoding is really the only "mainstream" application I can think of.

For Javascript development I doubt you would notice the difference, unless it's something highly specialised.
Don't forget the anti-BDS laws state politicians have passed at the behest of israel. I think more than a dozen states have already passed this unconstitutional ( in my opinion ) law. Now congress is looking to enact it nationally.

https://www.bloomberg.com/opinion/articles/2019-02-06/anti-b...

Replace israel with russia. Can you imagine any politician passing a law criminalizing any company from protesting or boycotting russia? The hubris to even think up such an anti-american law like this is worrying.
It is interesting that "open" part of openrsync refers to license -- BSD, vs original rsync's GPL

It's not often I see "open" to mean "non-GPL" in software :)
Yeah it has bizarre margin and positioning styles set forcing the text off screen. How odd.
I think it's subtler than that. It is mostly safe to run a contained process as "root" because in theory the ways that root access can be exercised is highly sandbox by the use of various namespaces, as well as things like capability restrictions (you generally don't have CAP_SYS_ADMIN or a few others), limited syscall attack surface (you generally have a syscall allowlist via seccomp-bpf), etc. Yes, it's wrong to not understand that the runc process runs as root. But I think it's only very slightly less wrong to claim that a process inside the container has root access in the way that, say, ssh root@host-system has root access. It mostly does not, and this vulnerability is notable precisely because it's one of the rare ways to exercise that root privilege outside the container.

We looked at this at $work and got into a serious rabbit hole about how exactly Linux capabilities work. I think if I started asking interviewees to explain permitted vs. effective capability sets and how file and process capabilities differ, I'd never hire anyone. (And I think to figure out yourself how to "correctly configure" a container, you need to have at least some understanding of that.)
I'm a tech copywriter and have had a couple of developers reach out to me with similar needs. It was unexpected, but it's been interesting exploring the issue with them and I'm curious if other developers are interested in chatting about it too. If that's you, then please feel free to hit me up -- email is in my profile :)
When you enter a private business, they have every right to track you as they wish.
Easy, it makes the product less entertaining and appealing. I even explained that in my response.

> By raising awareness of the injury risk viewers now know the big impressive hits they like to see have real potential consequences. This makes them less entertaining to watch. This reduces appeal for advertisers and directly threatens the NFL's core business.
Is China imposing an international ban on US made equipment?
Russia to Disconnect Entirely from the Internet as Part of Cyber-Defense Measure
Nevertheless, there's no reason why the 20-40%, people that show up to work, shouldn't be able to live happy, comfortable lives given the state of technological development. Zoning and other regulations are the main reason why some of them don't. It's a shame the article spends so much energy talking about taxation, when taxing the wealthy doesn't make average people any better off.
We don't, as evidenced by the fact American football and other contact sports both aren't banned and are extremely popular.

We can still criticize the league for downplaying/covering up the risks of brain damage. After all, to make a proper cost/benefit analysis you'd need to know all the (known) costs.
Google's promotion process biases very heavily towards "impact".

The problem is that maintaining existing projects generally isn't considered to be a demonstration of impact (or at least, it's a MUCH harder case to make). It's much easier to make the case that greenfield projects demonstrate impact.

Additionally, engineers have a good amount of power over what they get to work on: managers generally have to convince them to join a team. It's nice in concept, but lacks a steady influx of unwitting new engineers to help support all the not-so-sexy projects (like many other companies).

…so, you tend to see a pattern of engineers building a new thing, launching it, and then moving on to the next project. Leaving a trail of poorly supported projects in their wake.
This is why we need the EU, and laws like GDPR and the Right to be Forgotten:

Google's Eric Schmidt suggests that young people should change their name upon reaching adulthood
https://www.telegraph.co.uk/technology/google/7951269/Young-...

Facebook's Zuckerberg Says The Age of Privacy Is Over
https://archive.nytimes.com/www.nytimes.com/external/readwri...
I haven't worked at home since I started contracting (after a 10 year stretch of all remote work). In my experience most jobs that you get through a staffing agency are for big lumbering corporations that are completely out of touch with the industry and think that all employees are thieves and villains that must be supervised at all times. These companies are also the ones that have enormous budgets for contractors (for accounting reasons, I guess) and very little oversight (institutional inertia can keep you on a contract for much longer than it takes to finish a project, and projects take significantly longer than they should because of all the above factors). I've been fortunate that I'm mostly working on projects where I'm the sole front end developer and I get to dictate all of the technology decisions, and building something from the ground up is very gratifying, even if you have to work in a soul sucking office park in the middle of the suburbs.
Most people talk about catching errors, but I think the the biggest benefit with static types is performance - as it makes the code easier to optimize. With TypeScript you do not get that benefit. Maybe we will see a new variant of "use asm" for JavaScript, but more human friendly. I really wish TypeScript would have used type inference instead of annotations, and only have a type-checker, and not transpile. JavaScript is already strongly typed. And a completely static type system is a pipe dream, as anything connected to the real world have to deal with chaos.
Voting needs not only to be safe. It needs to be safe in a way that even old people, or those with zero knowledge of technology, do not belief conspiracy theories about how their vote is being stolen.
Sure. I don't have any issue with discussing how to raise up the bottom 80%. This article just isn't very good.
It doesn't matter if it's playable if no one wants to watch the games. Do you think you would enjoy watching a game of touch, or flag football?
For anyone who has ever wondered why soccer is so popular outside of the US in spite of being fairly boring to watch (and in spite of being fairly unpopular in America, the "entertainment capital of the world"), Association Football receives tens of millions of pounds in subsidies from the British government[1] (which even has a minister of sport!), and is part of the PR strategy to promote promote British Imperialism by influencing the Laws of the Game to resemble traditional Cambridge Rules.

I'd argue that many soccer "fans" view watching their nation in the FIFA World Cup to itself be a patriotic act, despite the rampant corruption which soccer loving nations refused to prosecute until after the United States took action[2].

Before any arrests were made, British Prime Minister David Cameron actually criticized the BBC for investigating FIFA's corruption because it might interfere with England's bid to host the World Cup [3]. The Oxford man in charge of the World Cup bid called the BBC "unpatriotic"[4] for trying to reveal the rampant corruption that is endemic to soccer.

So why suppress the BBC? Their effort to spread awareness was viewed as undermining the foundation of the game. The idea that the sport is egalitarian and based on merit, etc. Worrying about finances makes the game less appealing to poorer Commonwealth nations, and it is the association with rags-to-riches stories (like Pelé's) that makes the tie-in with wealth and imperialism so powerful.

It's really absurd how some soccer announcers scream "GOOOOAAAALLLLLLLL" as if the length of their shouts is proportional to their manhood[5] and how the entire sport coalesces around "hooligan" culture[6] and promotes values like sexual harassment and destruction of property. Soccer's rampant homophobia and sexism probably stems from soccer hooligan culture's "ritualized male violence"[7].

Even though Britain has passed multiple laws to limit hooligan culture (Football Spectators Act of 1989, Football Offenses Act of 1991, Football Disorder Act of 2000, etc.), MPs are currently considering a new law to ban specific homophobic chants[8] now that they've become loud enough to be audible on television broadcasts, making the sport seem far less professional.

[1]: https://www.sportengland.org/media/13753/all-awards-april-20...

[2]: https://en.wikipedia.org/wiki/2015_FIFA_corruption_case

[3]: https://www.nytimes.com/2010/11/27/sports/soccer/27sportsbri...

[4]: http://news.bbc.co.uk/sport2/hi/football/9201248.stm

[5]: https://www.youtube.com/watch?v=ZkIGO2UA-u8

[6]: https://www.youtube.com/watch?v=jMynJt3pUvM or https://www.youtube.com/watch?v=QUUOLFAbJ6A, which features soccer fans harassing women at a lingerie store in Copenhagen

[7]: https://dare.uva.nl/search?identifier=756c8e86-9b1a-4d82-b5d...

[8]: https://www.independent.co.uk/news/uk/politics/homphobic-cha...
Are accepted companies expected to move to the Bay Area?
We do that, yes. "Crater" is the name of the tool (also called "cargobomb" at one point).
Another small tidbit:

IBM standardized a terminal screen size of 80 columns because that was the same width as a standard format IBM punched card.

In theory you could show two cards on one screen (height was 24 or 25 rows, usually) - but I honestly don't know if there was ever any call to show punched card data on a terminal, period...?
I don't have a suitable workload with me right now. Has anyone tested the performance of PyPy3 vs PyPy2? Last time I tested it on a problem, PyPy2 was significantly faster (at least x3). That was maybe one or two years ago, when it was in beta.
You've never once seen something and felt something was a bit off?

You're never able to read a person?

You don't think people working in a restaurant can't put 2 & 2 together and come up with 4 more times than not?

So, you see a person come in with different children repeatedly and act above & beyond affectionate to them. Inappropriate caressing/touching?

You don't think that's gonna set off alarm bells in the staffs' heads?
Don’t most U.S. based poor still have housing, food, cable television, air conditioning, heat, cell phones, and access to public libraries with WiFi?

It’s not luxury but isn’t it major progress vs 100 years ago?
I wasn't happy with how shady they were around their security audit or the fact they redesigned their entire program that made it super clunky and broke my workflow. I had been using Enpass since 2014 maybe 2013. I had even purchased a lifetime license. I didn't like the idea of a closed source password manager but never found anything better than Enpass. I wouldn't personally recommend it to anyone, even when I was using it, because of it being closed-source.

I've since moved to a self-hosted Bitwarden [0]. Open source and free and weren't shady with their security audit.

[0] https://bitwarden.com/

[1] https://blog.bitwarden.com/bitwarden-completes-third-party-s...
Glad you like it. Now go and build crazy stuff!
Heh - did someone type '%20' into the HN submission form? If that were turned into a URL parameter on clicking Submit, then the %20 would be interpreted as a space. Just a theory. Been troubleshooting too much today perhaps...
Do you have to worry about abuse of the API key used to pull in the doc or this isn't an issue (e.g. API call cost or going over a quota)?
The issue with the present system is that we have one numbering scheme trying to satisfy two very different roles:

- automated dependency management (“can I safely update to this version?”)

- marketing (“do I care about this new version?”)
we should all be using Rust then :)
Those things all cost money and time.
Delivery Startup DoorDash Reaches for Over $6B Valuation in New Funding
What about large companies that underwrite their own health insurance?
That's exactly the kind of article that gets written from a page on Wikipedia.
Elon Musk: Moving to Mars will cost less than $500,000 maybe even below $100,000
I've been working with DevelopIntelligence for 3+ years as an instructor. They are a good company.
My understanding is that they actually assembled the DNA from small nucleotide sequences, not by taking an actual bacteria and just removing bits.

Once they had an assembled chromosome (I believe it was a single ring), the scooped out the dna form a different strain of bacteria, placed their DNA hoop into the empty one, and it reproduced.

So, it is still a far way from starting with beakers of the elements, but certainly a bigger accomplishment than slicing some genes out of an existing bacteria.
That's so true! Emacs has got some modern and really well crafted packages during last decade (e.g. Magit, Org or Notmuch). It's a really interesting and vibrant platform right now. I have high hopes for lsp-mode.

Another package with great UI is calfw.

Of course, there were already plenty of great classic packages (e.g. Dired, Calc, Gnus or Eshell) and modes (e.g. AucTeX, SLIME, ESS...). But things are getting really good lately.

ELPA and use-package have also done away with lots of friction points when installing and updating packages.
Albatrosses have a unique adaptation (dynamic soaring) that allows them to live most of their lives on the open ocean. They don't face many predators or even humans out there. Interestingly enough, global warming is actually helping albatrosses, as increased temperatures lead to increased wind speeds, allowing them to expand their range.
Yeah, I kinda noted its a small amount but it seems odd to have it as subscription service.

I feel I'm paying for almost everything as a "subscription" and I own zero.

$60 1Password
$156 Netflix
$120 Amazon Prime
$1200 AT&T (estimated, Family Plan)
$720 Internet
$260 NYTimes
$168 Spotify

So thats $2684.00 for services and content per year - with nothing to show for it if I cancel. Fine for most people, but part of it gnaws at me. To each their own.
A bit off topic, but anyone know what the symmetries for Conservation of Gravity and Conservation of Magnetic charge are?

i.e. gravity can not be created or destroyed, it can only be moved (works just like Conservation of Charge).

And a Magnetic monopole can not be created unless you create both sides at the same time.
Is that a reasonable metric to use? (edit: ... to declare success?)

We can have major progress and still not have sufficient progress. We can make major improvements and still feel like we have a long way to go.

Just because we're better off than our grandparents doesn't erase that some of us are relatively badly off against today's standard, and we could be doing more to help those who are at the bottom of our socioeconomic ladder.
Because reddit's user base is small compared to whatsapp's. Reddit has about 330 million users while whatsapp has 1.5 billion. Not only that, whatsapp's user base is the more lucrative smartphone/app/mobile while a significant portion of reddit's users are desktop.

https://www.statista.com/statistics/272014/global-social-net...
At least in the US, involuntarily getting bumped from a flight requires mandatory compensation in some instances (if the arrival delay is >1 hour): https://www.transportation.gov/individuals/aviation-consumer...
Are they listening to the content of my phone calls? Because if not, I'm just a guy who has talks on the phone a lot.

I know people who talk on the phone for hours and hours. Doing so should be well within the realm of normal consumer use!
> I am still on a 4.3GHz

I wonder what the benefit of an upgrade would be.
Exactly. The goal isn't just to minimise the number of errors, it's to minimise the estimated number of errors among the most conspiracy-prone 10% of your fellow citizens. The validity of the vote is something which resides in their heads.
That's a hot take. Let's break some things down

>> the top 20% possess superior values, habits, and cultural systems for social success and upward mobility

Wut? The top 20% possess a disproportionate amount of the real wealth. This isn't a value or habit, it's just the money itself. You don't need upward mobility when you're already at the top. You know what they say, the easiest way to make a million dollars is to start with 2 million dollars...

>>make choices to gear themselves and their children towards development of important skills to thrive in the modern workplace.

Or, they then use that disproportionate level of wealth to skew the system towards benefiting them. If you're a CEO, you can create a culture that favors people like you (because hey, you're a CEO, and "logically" you should want people that resemble you since you're so successful) which creates a bias towards certain people and therefor against others. If you have huge sums of money you can afford to hire the best accountants that allow you to avoid paying as much in taxes (because the tax code was lobbied for by previous generations of extremely wealthy people). Oh, and you already have a built in network of connections to allow open (or just fully remove) doors blocking your way towards success.

Getting rich is extremely hard. Staying rich, much less so. The point of this article however seemed to be that if you agree that there is a problem with the distribution of wealth (spoiler: pretty much every poll in recent years has shown this is overwhelmingly true on both sides of the political spectrum) then figuring out people who may be responsible for this would be a good way to solve it.

Also, "herd morality" is just "morality" or "culture". There's no such thing as objective morality that I've encountered. At best you'll just find common cultural agreements.
Actually Perl6 does enforce it if you tell it to. The following fails to match.

'abc' ~~ m:ratchet/ .* c /

The `.*` gobbles everything up, which means there is nothing left for `c`

When writing grammars, use `token` which turns on `:ratchet` for you.
Drunk Witnesses Remember a Surprising Amount
They also have the right to kick me out, but I hope they don't do either.
Your example does not follow SemVer.

If it did, however, your query would have a straightforward answer described in Section 11 of the Specification[0]

Here is their example for how to handle pre-release versions:

1.0.0-alpha < 1.0.0-alpha.1 < 1.0.0-alpha.beta < 1.0.0-beta < 1.0.0-beta.2 < 1.0.0-beta.11 < 1.0.0-rc.1 < 1.0.0.

The example shows that "1.9-rc.1" is less than "1.9" and both are less than "1.10".

So while it is true that many parts of SemVer are as yet unspecified, it seems to me (from these comments), that many people do not understand the already specified parts of SemVer, currently.

[0] https://semver.org/#spec-item-11
I'll try explaining it. It's a new implementation, from scratch (clean room) of rsync, which will become the new rsync in OpenBSD. The tree that it's been imported into is the openbsd cvs tree that contains openbsd, openssh, opencvs, and other major projects.
The NFL is moving closer to touch football every year.
Not in California, for example, which has taken Dream Hoarding to the extreme.

AC, Heat, cell phones, internet are all easily achievable, sometimes with an RV or a car. But housing has been hoarded to an extreme, locking out all sorts of people.
Amazon to Acquire eero to Help Customers Better Connect Smart Home Devices
Amazon to Acquire Eero
Yeah. I am not a doctor, but I do have some limited first-aid training. I'm not advocating that everyone should use this type of gauze. But I was pointing out that in the case of severe bleeding this gauze would be better than simply closing the wound and hoping for the best. In fact, during my training I was told that you don't want to close an arterial bleed, because the artery will simply continue bleeding copious amounts of blood into the (now closed) cavity.

In my mind use of a medical device such as this type of gauze should be the subject of a risk/benefit analysis, where the risk is potential for burning in some cases versus the risk of bleeding out. If you've got a cut that isn't pumping arterial blood then you can probably rely on the body's own copious clotting agents to stop the bleeding. However if the patient is likely to bleed out, then it may be better to use quikclot gauze or similar, because the choice is "die from blood loss" versus "receive some burns."

A different calculus might apply in cases where you're not in the backcountry because the medical response speed is much faster. I wouldn't assume that search and rescue has a response time less than 6 or 8 hours, and if the conditions are especially shitty and you're far enough away from a trailhead it might be a day or two before you can expect rescue. From what I understand it can take an hour or two before the SAR people in my area are even headed toward their base. From there it could be another hour or two before they can mount a response, and then there's time spent in transit and time spent searching for you.

Under those conditions it shifts the mental calculus from solutions that will work for less than an hour toward solutions that will work for hours or days. So it's probably better to take a burn that won't get much worse instead of an arterial bleed that will kill you in less time than it takes for SAR to start driving to the chopper from wherever they're on-call at.