skysight-inc/HackerNews huggingface dataset:
Kubernetes is a complex project with a large codebase. Writing it in bash would be a nightmare to maintain.

Go makes sense as an implementation language for a system like this for many reasons:

- it doesn't require a VM (goodbye Java)
- it is a memory safe language (goodbye c++)
- it has strong types to improve reliability
- it does a good job of handling complex, multi-module code efficiently (these two say goodbye to python)

So of the Google friendly languages you end up with Go.

And I don't know if it was planned, but Go has turned out to be a boon for contribution. A surprising number of devops engineers are willing to dip their toes in Go waters and I highly doubt they would've done so with Erlang.

I think you'd end up going the chef route, writing the control plane in Erlang and expecting users to interact in Ruby or something like it.

Also this whole conversation seems a bit off because Kubernetes is a multi-service architecture with many components. You can absolutely write operators in other languages since Kubernetes exposes an API.

It's kind of the whole point to be able to take an existing application and run it in k8s rather than a regular VM with minimal changes. Expecting developers to rewrite everything in Erlang is nuts.
Nominet, the UK's domain registry, has a solution called "Domain Lock".

Whilst predominantly offered to registrars it is also available directly to registrants for the equivalent of $120 per year.

Assume a user has a domain name registered with their preferred registrar, e.g. Gandi, GoDaddy etc., then to change the DNS settings the user has to login to his Nominet portal (using mandatory 2SV) and unlock the DNS for up to 20 minutes (it can be manually re-locked earlier). The user then has to log into his registrar (preferably with 2SV set-up) and configure the relevant changes.

The additional steps involved are sufficient to prevent almost all unauthorized DNS changes except DNS poisoning.

Nominet say that their separate "DNSSEC signing service was withdrawn from service in January 2016 due to low uptake".
The whole system needs to be on DNSSEC to prevent hijacking. Just because you have a DNSSEC server doesn’t mean anything if the guy down the way can still be made to redirect traffic to a malicious site.
Regardless of whether matter is conscious, could you please not post unsubstantive comments to Hacker News?
Microsoft Workers Timed Their Protest to Hurt
Building an operating system kernel is not anything like setting public policy. Anyway, I'm not saying how things "should" be, I'm relating how regulatory policymaking actually works. Not that it's driven by public opinion, but that powerful participants are aware of its impact on public opinion.

Again: if that wasn't true, then why did people who supported the FCC rulemaking bother to pump in a ton of fake supportive comments? Why did people at the FCC try to cover up that that happened?
> People who take photos without permission to other people.

That isn't really what people are worried about here. The issue is when a rogue app decides to start recording video of you without you knowing -- having a camera indicator LED which is in series with the camera's VCC (like almost all laptops have these days) would solve that problem.

There are is a discussion we could have about whether taking a photo of someone in a public setting is something without permission is ethical (and whether the benefit of helping people in private situations would offset the downside of making it harder to discretely record evidence of wrong-doing). But that's not really what this discussion of having an indicator light is about.
I sometimes taste Raw meat to make sure its fresh. Its pretty much tasteless. Its all about how its prepared.
The top one on the list, the greylag goose, was subject to about 68k destructions. In 2011 the number of greylag geese in the UK was 140k. In 2008 it was 86k and in 1930 it was 500.

They are rated as Least Concern globally, but it seems fair to estimate the number of interventions at about one third to half of the population.
Discussed at the time: https://news.ycombinator.com/item?id=14066341
On the other hand, the lens library in haskell is extremely abstract. Libraries obviously have different tradeoffs but using lens can increase the onboarding cost significantly for new team members.

I am mentioning lens because it has a both function:

incBoth = both += 1

Which has a fun type signature:

incBoth :: (Bitraversal p, MonadState (p a a) m, Num a) => m ()
I'm on the opposite side of this. I've eaten meat for the first 23 years of my life, but my current partner is vegan. A large part of our relationship has been discovering that vegetables are actually good to eat when they're not an afterthought to a meal. I go out of my way to try the meat substitutes now, because I'm holding out that one of them will actually be good enough for me to show my carnivore friends.

For many years, I've wanted to try being vegetarian as a way to reduce my environmental impact. To me, meat substitutes are the last missing piece in the puzzle, the piece that shows that its possible to consume staples like hamburgers or spaghetti and meatballs.

Not all of the meat substitutes are good. Not all of them have to be. But a more sustainable future, where meat (and especially seafood) are cultivated in a way that has a less harmful impact on the environment, is a future that I want to help facilitate.
I don’t think I’ve ever been exposed to an attack that the HSTS preload list has protected me from, but that does not negate its value. Assurance is an important aspect of InfoSec. Without a doubt DNSSEC has some major shortcomings and the lack of implementation makes it useless, but that does not mean it would not provide value if it were more widespread
Full DNSSEC eliminates the need to have a trusted cert supplier. You can make your own very and the DNSSEC system will be able to validate you are you and not someone else in the system.
Pros: interesting(-ish) work, fun(-seeming) people, bragging rights

Cons: amateur hour 24x7
The modern equivalent of ASCII art
This is also happening at White Castle, where they are selling Impossible Burger Sliders for 1.99. I will say I didn't particularly enjoy it but I will also say I it was the first time I've been to a White Castle when I'm sober, so YMMV.
Of course. We are matter.
I'm a little surprised that route53 IAM policies aren't granular enough to restrict access to specific records or record types. It seems obvious that a service (lambda or such) should be able to issue cert autorenewal records without any other route53 access, and I wouldn't be surprised if this were already on a roadmap.
Moreover, they disrupt circadian rhythms of all animals around cities that can't get good sleep due to blue/daylight component of LED lights installed in the cities.
I’m intrigued how you see it going.

Currently most employable people are working, and there’s huge wealth inequalities. Do you see people percieving it worse if they didn’t need to work ?
And that is the vast majority¹ of all living mammals: https://xkcd.com/1338/

¹ By weight, at least
That doesn't really solve the battery life / analytics duplication problem.

Furthermore, from experience, duplication within a single app often happens all on its own because, say, different departments use different toolchains with different integrations, thus want different analytics providers and it's easier to just have the app send to both. It's inefficiencies all the way down because the only one to really pay for this is the user, and the user doesn't know they're paying for this (be it in battery life, PII leakage, etc).
Do not donate to me (2013)
Racket had parser generators available. See for instance ragg, or is fork, the brag parser used in the Beautiful Racket book: https://docs.racket-lang.org/brag/index.html

The technique used in the book is to use brag to describe the grammar and generate a parser/tokenizer to s-expressions, and then you can either interpret it compile them directly, or use the Racket macro system itself to expand them into Racket.

And of course, Racket's macro system itself can do quite much without even a parser generator. The standard library even includes an example ALGOL 60 implementation done as Racket macros, and examples of C and Java can be found on the package server.
Imagine if we did that with car crashes, which kill 40,000 people every single year in the USA.
it seems inevitable that fake meat will reach a texture and taste level that's "good enough" for fast food titans to offer alongside the normal, bargain (dollar menu ish) type stuff. if you add in the economic arguments - fake meat being way cheaper logistically i'm guessing and only going to get cheaper, perhaps order of magnitude levels so - then i would wager that the lower-end options will be the fake meat stuff (which those of "lesser means" might switch to consuming) whereas the "real meat" becomes the more affluent option.
I really don't get the opposition to this. Either we need the military, or we don't. If we do, then we want to have one that's can beat anything that could be thrown at it with as few casualties as possible. If we don't, then going after VR devices rather than the rifles is all wrong on priorities.
I agree, my "loyalty" to meat is strong, but irrational, even after I was a strict vegetarian for 7 years (a long time ago). If someone brought me something that just tastes better, they'd also have to make a convincing case of better nutritional benefits and that's not really a field with stable results and opinions. Price has nothing to do with it at all...
I used to work at a H1B shop and the way we got around this was by posting the job for three or so months and only interviewing those candidates who did their undergrad at an Indian university.
What a coincidence. In the US they are also pests, often regulated under relaxed hunting laws. Them and certain varieties of rabbits.
I think the point is that people’s own preferences are influenced by how they grew up and thus changing their diets dramatically will not be so simple.

A point I was 100% agreeing with, so I'm not sure what your point is.
This seems like a problem that could be easily solved by reintroducing wolves. Of course, then you have two problems.
As a meat eater, yeah, agree. My wife and I have reduced our meat consumption by ~50% over the last few years, and we've done it mostly by finding dishes that were veg*n to start with, as opposed to meat substitutes.
> That sounds like a case against wealth inequality, since there’s no increase in happiness for the very rich.

Not necessarily. Inequality seems to bring unhappiness independently of wealth.

You may have more than others. But if you get way less for your work than others, most people will be unhappy. That is why millionaires want more when they see the billionaires.

This video helps to illustrate my point: https://www.youtube.com/watch?v=meiU6TxysCg
For an entertaining examination of the question of consciousness and its implication for philosophers, I recommend Rupert Sheldrake's lecture here:

https://www.youtube.com/watch?v=SFhsObpja8A
>The root of trust comes from the accumulated proof of work instead of an organization.

This is the only reason I have had any interest in the HS project.
Thanks for the info, I had no idea this was possible. I'm tempted to give it a go on my site.
What's wrong with doing nothing, laying on the couch snuggling your pets / SO / family, or enjoying your friend's company around a meal / drinks?
Blockchain and Logistics: Can the New Technology Reinvent an Outdated System?
I am amazed at how my brain's ability to focus on long term tasks has been diminished over the past few years. I used to be a voracious reader, but lately have struggled to read (offline) more than a few pages at a time. I won't blame smartphone usage entirely, but it certainly has been a large contributor to that.

This year, I've begun a concerted campaign to reduce my phone time. The latest iOS screen time tracker ironically, has been a help. I look forward to the weekly reports that say "Your screen time has been reduced by x minutes per day". So far this year, the downward trend has continued.

I spent the weekend just gone reading a lot more, and also taking up painting again after a nearly 3 decade break from it.
I've since bought an X210. It's an X201s chassis with:

• A Core i7 8550u (4 cores, turbo boost up to 4GHz)[1]

• 2 DDR4 SODIMM slots. I put 32 GB of RAM in.

• 2x mini PCI Express slots. There's an 802.11/Bluetooth card in one. The other is empty but could be used for LTE.

• An M.2 NVMe slot. I put a 2TB SSD in it.

• An upgraded screen (2880x1920, 450 nits, wide gamut). The bezel is cut to make room for the 3:2 aspect ratio, sacrificing the webcam.[2]

I have small hands so I slightly prefer the X62's keyboard, but everything else is much better on the X210.

1. https://ark.intel.com/products/122589/Intel-Core-i7-8550U-Pr...

2. http://i.imgur.com/lj7g7CV.jpg
I own a a car and use it every day, but if I’m traveling more than ~600 miles (or at all? for work), I just rent one. It’s fairly cheap and it keeps the miles off mine, plus if I break down or get in a wreck I just call Budget back up and get another car instead of dealing with my broken car being two states away.
I'd say most are racket variants - and that makes sense - the scribble lang (for documentation/documents) is a prime example of that kind of "tool" DSL, and "lazy" (as mentioned by another commenter) is another.

https://docs.racket-lang.org/scribble/getting-started.html

But there's also stuff like:

http://docs.racket-lang.org/sweet/index.html

And after a quick Google I found:

https://github.com/soegaard/minipascal

And there are of course things like:

https://docs.racket-lang.org/datalog/datalog.html

But I suppose that qualifiés as "lisp like"...

[ed: and the article mentions "brag" which I think would be odd to call "lisp like" :
https://docs.racket-lang.org/datalog/datalog.html
]
> Essentially all applications that are performance-sensitive use a stored-procedure interface to run application logic inside the DBMS and avoid the crippling overhead of back-and-forth communication between the application and the DBMS.

—Micheal Stonebreaker [1]

[1]: https://courses.cs.washington.edu/courses/csep544/10au/resou...
If the investigations of any particular mishap were to indicate that some particular person or persons had been criminally negligent, it would be no surprise to see those people prosecuted eventually. If another team of investigators has to write a different report, they will.
Isn't dnscurve a better alternative? Dnscrypt? Etc
By 'we' - he means essentially every culture and most humans throughout history.

We are essentially omnivorous by nature.

We mostly all ate meat, not just 'some rural people'.

We literally evolved around it, so it's part of our composition in a very, very fundamental way.
I'm amazed that so many people who are otherwise smart do not use a password manager. I have been sitting with friends and one says "ugh. I hate when you can't remember a password and have to reset it." I suggest using a password manager. It is easy and takes less than 5 minutes "ugh. Sounds like a hassle..." and none of their pics or personal data are backed up either. Grrrr...
Journalist, 12, faces off with police officer who threatened to arrest her
At the moment, DNSSEC is the only off-the-shelf authenticated DNS system. We need that authentication between the DNS servers and the Certificate Authorities. DNSSEC between the DNS server and hosts doesn't matter much. There are other ways to MitM, and insecure fallback is inevitable.

Your reasoning is of the form, "We need something. This is something. Therefore we need this."

No, actually we don't. We don't need this unless we can demonstrate that it makes things better in the real world, with real problems that people really encounter.

The problem isn't simply that it fails to protect against DNS account hijacking. The problem is that it makes the common problem of DNS account hijacking even worse than it is now. Which means that it makes an existing problem bigger than it is now.

Yes, it also solves another problem. But now we have to look at it as a tradeoff between two problems, decide which is worse, and decide accordingly. Every security professional and network admin that I trust finds the tradeoff obvious, and not in DNSSEC's favor.
Wolves tend to leave people alone. Bears on the other hand...
The neuroscientist shattering the myth of the gendered brain
I find dark mode comfortable. I find light mode comfortable.

Using both in different programs is very uncomfortable.
I've met a lot of vegetarians and vegans, and they're about 50/50 as to whether they want to eat meat-like things.

And yeah, there are several restaurants I stopped eating at because they replaced perfectly fine veggie dishes with things that were more meat-like.
And it comes from its Latin name, Confoederatio Helvetica, just to be complete. ;)
Computer Science for Middle Schoolers: BOGO Sort, Insertion Sort and Bubble Sort
I mean if you want to move the goalposts(we were just talking about deep focus work) or claim that my career isn't legit be my guest.
No, "full DNSSEC", in the hypothetical universe in which browsers ever supported DANE, simply moves you from having to trust CA's like LetsEncrypt to having to trust the registrars and the world governments that have (often de jure) control over domain registration. DNSSEC does not eliminate centralized external trust anchors; it depends utterly on them.

† (spoiler: Apple, Google, and Mozilla dabbled with it and then rescinded their support; Mozilla and Google have both stated, Google more formally than Mozilla, that DANE isn't happening)
> I agree with rocqua that the Registrar needs to have a more active role in securing DNS. I think we need new standards of control between domain owners, registrars, DNS TLDs, and certificate authorities.

There are registrars that do take a more active role in securing dns, but they usually charge a bit more. A surprising many companies and even government departments will compare two dns registrars exclusively on the price, and if one cost $10 annually and the other registrar cost $29 then they will pick the $10 version. What they might not be aware is that $9 out of the price is the registry fee, so what they are really comparing is the service that you get from $1 margin vs $20.
There's a lot of literature that repeats a harmful misnomer.

The register is always an instruction pointer, even if the hardware incorrectly calls it a program counter.

The processor that matters most, by far, is x86. At one point PowerPC wasn't too far behind, and PowerPC still dominates in high-end network gear. Both of these processors are correctly documented. For x86 the name is ip, eip, or rip. For PowerPC the name is usually nip, meaning "next instruction pointer". Sometimes the PowerPC documentation will use "current" instead of "next", or "address" instead of "pointer". All of these are correct.
> They also tend to be the least buggy parts, I would handwave that maybe 1 in a thousand bugs were in the lexer/parser.

Ehh, I don't know... https://johanengelen.github.io/ldc/2018/01/14/Fuzzing-with-L...

From the article:

> My expectation was that there would be a bug deep down with some rare cornercase of a cornercase, and that the fuzzer would have to run for hours and hours covering more and more of the lexer to, perhaps, finally find a bug. So I was preparing for a long fuzzing session, wanted to go to bed and kick this one off but… The fuzzer found a first failure within a second.

> Running the fuzzer several times, sometimes it still hadn’t found a bug after 15 seconds, but usually it found the bug within a second; the process is (semi-)random so that’s expected.
Dedicated cameras, whatever their sizes (e.g. gopro), don’t have a mandatory shutter sound. Actual upskirting has little to do with it, phone makers/carriers decided to add the sound to preemptively deflect any issue that could slow the camera adoption when it went live.

(also not a law)
> Besides, if some particular blockchain succeeds as a currency, it will inevitably host a social networking protocol where the whole network's state (e.g. who follows whom, who likes what posts etc.) is always available to anyone interested.

I find that unlikely. The volume of social media far out classes that of financial networks. They also have competing concerns.

A blockchain is only secure because it uses up lots of resources to ensure that the network is secure hence it costs money to use the network. Social networks are useful because they are low friction: very easy to use, any time, freely, as much as you want.

Blockchains are like credit card networks in this respect, you (currently) pay 9 cents to have a transaction committed within an hour (or 35 cents for a few minutes), credit card companies offer a similar service in the 20-25 cent range. I don't see anyone paying 20 cents to have a post committed within a few minutes, or even 9 cents to like a post. That just doesn't track. (Let alone the storage space concerns...)

However, a federated social media service (think email) is a much more viable alternative. And it already exists. Such systems could easily publish public cryptographic ledgers, the joining of which would provide one with a state of the network at any given time. Again, no need to pull a block chain with proof of work into this, there is no reason we need to worry about that because trust can come from us knowing other people in the social network.

As a final aside, publishing the entire social network isn't even a feature most people want. Not really. Why do you think Facebook has privacy controls? No one really wants to post their entire social media profile on the web in some sort of provable immutable way.
A resultant accident would also require:

ATC to ignore the false transmission and take no action.

The departing pilots to accept a new voice and a clearly inferior/weak radio clearance as fact without verifying.

The departing pilots to not have situational awareness of an aircraft previously cleared to land on their runway.

The departing pilots to still not check final approach on the just-falsely-cleared runway before taxiing into position.

The landing pilots to have ignored the false transmission (also from a weak/inferior radio and new voice) clearing an aircraft onto their intended runway.

The landing pilots to not be watching the runway when they break out at minimums. (assuming your foggy day is a worst-case scenario)

The departing aircraft to have already started a takeoff roll and be more than 1,000' down the runway. (aircraft "touchdown zone" is not at the beginning of the runway)

Possible? Yes. Not in my top ten fears as a pilot. Much of ATC is a collaboration between professionals, not a dictatorship. It's really an amazing thing to participate in.
>DNSSEC is quite famously a solution in search of a problem.

I've only seen this sentiment every now and then in very particular circles. It's not really that famous.
Check out the P52. It's still got the Ethernet port and upgradeable memory. I've got a p51 and I just dropped 64 GB of RAM into it. I'll probably replace the SATA SSD with an NVMe drive or two as they drop in price in the next couple of years.

The T-line of laptops has suffered from the same kind of design mistakes for several years now, but as long as Lenovo keeps making the P-series with replaceable parts I'll keep buying them.
Non-plugin hybrids had all the drawbacks of gas engine drivetrains, but I view a plug-in hybrid as an electric car with a backup plan. Pure electric car owners are betting they'll never need that, but some of them are wrong.

That said, I've had a reasonably cheap and reliable used Elantra for a while, and I'm holding off on these until the market settles.
No, but many images used in the FROM directive do support ARM, so if say you start with an Alpine base image, and then do "apk install nodejs," and then run some Node app code, you don't have to modify a thing for ARM. Just clone and build as usual.
Portmanteau Generator
With the same drivers?