skysight-inc/HackerNews huggingface dataset:
that's what Intel Clear Containers and KataContainers are trying to do

https://clearlinux.org/news-blogs/intel-clear-containers-now...
https://katacontainers.io/
What am I not stating clearly?

Witch hunts are bad, but yes, there was a large spy network. Perhaps it could have even been uprooted with measured counter-intelligence, instead of McCarthyism.
His statement was: "but containers and Docker specifically shouldn't be used to isolate systems for security".

Well, thousands of companies, such as ISPs offering VPS are using containers for exactly that reason. Containers use cgroups under the hood, a Linux kernel feature that limits, accounts for, and isolates the resource usage (CPU, memory, disk I/O, network, etc.) of a collection of processes. As long as there aren't any bugs in the kernel related to cgroups, security is provided.

Saying containers shouldn't be used for security is like saying kernel functions shouldn't be used for security.
Well - you can visit their blog or even go to GitLab's repos and see the discussion there :).
https://about.gitlab.com/blog/
The fact you are paranoid does not mean they are not after you.
Apple sued by iTunes customers over alleged data misuse
Oh, I've just noticed there's similar blog post on GitLab's blog now:
https://about.gitlab.com/2019/05/28/upgrade-to-rails5/
You've just described an institute of technology.
Yes, it is.

Some try to do some journalism without stepping on government's toes too much, others are pure propaganda.

The outlets that are functioning like government propaganda channels have very low ratings, so they are not very good at directing public opinion so they updated the business model to include unvoluntary ad purchases on the absolutely pro-gov media, i.e. if you do not buy ads from these publications they make your life harder even in the private sector. Someone at a popular Turkish social media platform tried to compile a list of companies that advertise on these extremely pro-gov media outlets, the list was taken down by a court order.

Turkey sunk deep in the democracy and press freedom indexes. That's what happens when you cannot have a profitable media business.
> way fewer millennials went into trades.

It's not that we didn't want to, but that we never had the opportunity. The Great Recession destroyed basically every trade job out there. Nobody was going to hire a young buck when you could get really smart, experienced guy for the same price.

So us millennials went to college instead. In 2009, people my age with no degree had an unemployment rate of like 20-25% while people with degrees had an unemployment rate of maybe 5-6%.

A lot of my friends growing up that started in trades (myself include) ended up in the military and/or college because you still had to show up for work every day, just to sit around for a few hours to learn you weren't getting paid.

Not that I'm complaining, my life certainty worked is better as a result. But I don't think people with office job realize how bad The Great Recession was for people at the bottom.
A man gets Bay Area commuters off their phones
Do you keep Gmail open? It's poorly optimized for non-Chrome browsers and tends to peg the CPU at seemly random times.
Amazon defeated Rekognition shareholder revolt by a large margin
Safe refactoring + fewer runtime exceptions.
Chemistry Papers Are Retracted Mostly Due to Plagiarism or Data Manipulation
Out of curiosity, as a non-fintech Elixir/Phoenix dev, what particular facets of Elixir/Phoenix are fintech startups finding attractive/useful?
You don't necessarily need IPC. You only have to spawn a single-threaded child process that can call setns to switch back and forth between mount namespaces. You can also obtain file descriptors in batches to reduce the overhead.

I wonder how an O_PATH handle from a different namespace behaves once you switch back. If *at lookups are performed under its original namespace you only have to obtain it once.
Show HN: Webframe – get design inspiration from 800+ web app screenshots
Best described here: https://genode.org/documentation/genode-foundations/19.05/in...
I've taken the approach of building the monolith first with an architecture that allows me to easily pull parts of it out into services when I hit constraints and need that scalability.
This has very little to do with the plane's ability to glide. (A 737 glides just fine, if a bit steep for my taste).

In that particular emergency, the control surfaces prevent it from gliding. You can even have issues on a Cessna - loss of elevator is not fun.[1]

It's not about "denying physics", it's about having insufficient redundancy[2] and improper amount of control from MCAS - 3 times more than the FAA approved: [3]

No plane is 100% safe. Boeing made this one worse for the sake of saving money - the physics work out just fine, and gliding ability is not really impacted. (But I don't think it'd be a normal response - I can't imagine a pilot thinking "oh, I'm getting a stall warning with nose down at 4,000 feet, I know, I'll cut power and glide".)

[1] https://airfactsjournal.com/2018/12/elevator-failure-at-4500...

[2] https://www.seattletimes.com/business/boeing-aerospace/a-lac...

[3] https://www.seattletimes.com/business/boeing-aerospace/faile...
America already has exclusive scholarships.
>To the point the only person claiming there were WMDs was Cheney and his inner circle, which is why both the Democrats and our international partners had to be brow beaten into supporting the invasion of Iraq.

Just "Cheney" and NYT, and CNN, and the entire establishment, sans some voices. Besides the trillion dollar war efforts went on anyway (also against Afghanistan, a below third world country that has almost nothing to do with the, probably Saudi-funded attack).

>To claim these two situations are the same is a very, very large stretch.

Sure, they're not the same, today things are far worse.

Due to the declining status of the US globally, the fabrications, psy-ops, and "trust us" propaganda has sky-rocketed.

Watching the mainstream news and the silent compliance of all sides on the bogus narratives is like participating in an alternate reality universe (and that's before we even get to the fake news)...
It depends. School isn't for everyone.

I took a partial gap year and took a couple college classes with a good friend who dropped out and went on to become a journeyman in a union trade. I went on to get a bachelor's degree. School wasn't his thing. He continues to makes more than a lot of software/data engineers. And he has a pension that should* start paying out more than a decade before I'll be ready to retire.

*Interestingly though, because fewer people are going into the trades, he has noticed the quality of incoming people has gone done year after year and the aging union leadership has lowered the hiring bar to keep the pension numbers up. He can't count on people to do their job right or even show up on time, and they come in already knowing everything and not wanting to learn. With higher cost than non-union and struggling with quality it makes them less competitive with non-union shops in the contract bidding process.

There are good opportunities for people willing to work hard and learn.
That’s a problem. It’s also a problem that for something that can be a violation or misdemeanor can follow you across state and international boundaries...

On another note, how are 18 - 20 year olds going to get into bars? I guess the wristband/no drinks will be the norm for them.
Iranian social network scammers impersonated US political candidates
I can delay (for a long while last time I did it, I don't recall getting forced anytime in the past few years) and do what I generally need to.

If the requirement is to run for month(s) without updates, I suspect a 'home' OS was the wrong choice.

I think for your typical home user required updates with the option to delay is very reasonable.

The scale of bad bot activity out there would be tremendous without requiring updates. We see enough security discussion oh HN to make that clear.
Every time studies are published, we redefine the way in which could be heading towards LUCA. Maybe life on earth existed way earlier then we expected and earth recycles everything over period of time that the traces of origin are gone.
i think you missed my point :)
Agreeing to a license in the EU requires an affirmative action (i.e. pre-ticked checkboxes are automatically a fail to comply)

The requirements to have unticked checkboxes predates GDPR.
Great idea to show viability of solar setups! I’ve installed a simple solar panel / charge controller / battery solution in a van and was surprised how simple it is to get up and running. The tech is really reliable and is super affordable.
Huawei files motion against US declaring law as 'unconstitutional'
Not questioning your decision making, but DC seems like a fine place to go to college. I would've gone to Georgetown or GW without any qualms, same way that I decided to go to NC State (even though I've lived just outside of Raleigh since middle school).

Disclosure: I went to college 50 minutes away from where my parents lived and still lived on campus because I had to get out of living in the middle of nowhere and a 50 minute commute to class wasn't my thing.
That does not really seem like a "relent"...
You would have been able to find those same tools and electronics, you may have had to just spend a few minutes browsing some sort of catalog. The lack of advertisements wouldn't cause any serious difficulties.
The solution to this problem are laws that require devices like this to support self-hosted servers for OTA, data, or anything else. You should not be required to use a vendor’s services AND the vendor should not be allowed to implement permanent back-doors.

The problem, of course, is that runs afoul of US espionage and law enforcement demands that they have access to such data themselves.

They want it both ways in a world where you literally, cannot have it both ways. US cyber policy on this front has been a disaster.
I have never seen this $#$var trick and google is not the friend of perl operators. Do you have any explanation ?

perl -ne 'print if!++$#$_'

seems to work also
Thank you. It's nice to see references to real studies as opposed to the social logic saying 'It's the same as anti-vaxers, so there's no basis to that!'
> I doubt that it would damage China. The existence of the threat is already well publicized.

It'd certainly damage Chinese companies and curtail those companies' utility as sources of intelligence. How many drones do you think DJI would sell if it became known that flight logs and aerial photos were being uploaded to the Chinese government? (This is all purely hypothetical but the DJI app is very aggressive about permissions and updates, so they absolutely could if they wanted to. I have a dedicated phone for mine which never gets to connect to the internet, for this very reason.)
She did go to a private college and never had a job that paid more than 20k a year (mostly her fault). She has got extensions, deferments, etc... She is 7 years older than me so i didnt understand the differences in colleges at the time.

My step son was going to go to Texas A&M. He wants to do meteorology, it took me forever to convince him to take the first 2 years at community college to get general education classes out of the way, it is so much cheaper. I implore everyone to do that. But he didnt want to at first because he was going to miss "the college experience". Yeah it is saving him 10's of thousands of dollars.
I use JIRA and do not have this issue. It may be an extension you're using.
Is this really that much of a thing? Presumably we're mostly dealing with groups - probably mostly charities. Is it really so hard to create public consciousness that releasing a tonne of baloons into the air for no reason is littering that putting loads of effort into designing and promoting alternatives is worth it?
The real issue is security or the real issue is a non-US company dominating in a tech field?
To clarify, I had a 600 dollar/mo apartment I paid for near my job. This was 1 hour away from school.

I drove my Aunt's beater car she gave me for 15 years of nearly unpaid yardwork.

I did accept a 9 year old desktop computer from my dad.

I did have a girlfriend that was supportive, let me nap in her dorm.

I'm sure if you try hard enough, you can find 1 friend or family member that gives me privilege.

I don't have anything further to contribute, but I wanted to frame the entire situation. Maybe it's these obscure privileges that made it possible.
The demand for entry level programmers is often overstated. Many companies don't want to hire developers who have no previous experience, that they have to train on their stack. A junior programmer is often a net negative to team.

And you just kind of made the point, why hire a junior developer who you have to train and will leave right when they become useful? For just a little more money you can hire someone with 2-3 years of experience or at least someone who came from a boot camp who at least knows the stack you are using.
Most projects depend on complex, vulnerable OS's like Linux that nobody knows how to secure. High-assurance security prefers minimalist foundations designed for security. Then, those foundations are leveraged by user-facing layers to inherit their properties. It's usually isolation of compromises to specific parts of memory with some support for blocking side channels between partitions. Genode follows that approach using an architecture similar to Nizza and Perseus:

https://os.inf.tu-dresden.de/papers_ps/nizza.pdf

http://www.perseus-os.org/content/pages/Architecture.htm

The NOVA microhypervisor, if compared to popular VMM's, is also illustrative of how high-assurance security applies minimalist, privilege-reducing design to the problem:

http://hypervisor.org/eurosys2010.pdf

Although I don't know Genode's assurances, most of the field also tries to make the assurance (confidence level) of the system as high as possible by using techniques that prove it has certain properties and/or rid it of as many vulnerabilities as possible. I have a list of historical and current methods here:

https://pastebin.com/uyNfvqcp
> we as a society need to ... give them a path forward in life

that's what degrees like science/engineering is. It's a path forward. The trades are also one, but less "comfortable". What else could've society done?
I am unable to edit the original post, hence posting the storyline here again:

A software engineer moves to a village to get away from the rat-race of mega cites. Strolling accross the village the engineer stumbles on a local library and regularly starts visting there.

One day a man in his early 60s visits the library's computer section and sits at a computer next to the software professional. The man, through corner of his eyes, starts observing what the software professional is doing. The man has been made redundant few years ago. He visits the library to clear his head of his everyday life struggles.

On observing the software professional for few days, the man out of curiosity starts reading about computers and programming. Within a few months he becomes confident and starts his early attempts at programming. Step by step using online videos and some help from the software professional he learns how to develop simple web apps. Life starts becoming exciting for him once again. After a year or so he publishes his web app just as an exercise and for fun. But the web app starts getting traction (with all the excitement and panic that comes with unexpected success!) and he goes on to become a successful tech entrepreneur.

HTH
Mind sharing a few details?
Except giving access to a docker daemon equals giving the root access to the machine

because it's easy to do something such as :

$ docker run -it -v /:/hostfs debian chroot /hostfs

# I'm root !
Look, in a capitalist society, which the US is a prime example of, money flows towards those whose skills are contemporaneously scarce and in high demand by businesses. There is no right or wrong here; this is just the physics, if you will, of a society that idealizes capitalism. Complaining about this is just like yelling at gravity for making skin hang down.

Someone who isn't interested in any field that clearly pays high salaries is going to be stuck doing work that does not pay a high salary. If this isn't basic logic, I don't know what is. The fundamental mistake that such people make is going to college to begin with: their chances of securing gainful employment aren't great, but the chance of landing in significant debt is almost 100%. I don't see how anyone can consider this a good deal.

Is this "right", in a purely ethical sense? Probably not. I'm happy to spend all day talking about alternative societal forms where all skills and occupations afford practitioners a good standard of living, but such conversations are moot for as long as we as a society are clinging to capitalism.

P.S.: It's ironic how many of the most vociferous critics of our current economic model are also the prime beneficiaries of its spoils.
It's just a vulnerability scan, which is one small component of compliance. It's also the easiest component, and in many ways the least important. A clean scan does not mean you are compliant. In fact, if you are running the scan to check if you are compliant, then you are not compliant, guaranteed. Compliance is a process. It takes work, and an ongoing program. Anyone who offers you a product to make it easy is selling snake oil.

As far as PCI, this scan covers only three requirements out of hundreds.
I think you got it mixed up. The attack surface of a linux kernel is larger than the attack surface of a VM.

Simply speaking, VMs only need to properly take care of a few privileged CPU opcodes.
Millennials 'more likely to face working-age poverty than any previous generati
That depends on how much horsepower you have on both ends. I run my vpn off of a cheap cloud vps, which does the job, but doesn't have a lot of cpu power. I probably tripled my speed from openvpn to wireguard, all though both fail to max out my internet connection.
You're really not understanding that living in an airport is a total disconnect from your community? Really?

I am sorry.
Yeah but the number of Americans with at least a bachelor's degree[1] and the number of 4 year degree granting institutions[2] have both increased by nearly 50% since 1990. So your median bachelor degree holder today is likely younger than in 1990 and has a degree from a less established University. If you control for age and institution (e.g what does a 40 year old with a 4 year degree from the University of Iowa earn in 1990 vs today) you'd probably see every different results.

My gut says that a lot of this debt and reduced job prospects come from those 50% of institutions founded in the last 30 years. But I admittedly don't know enough about the subject to say for sure.

[1] https://en.wikipedia.org/wiki/Educational_attainment_in_the_...

[2] https://nces.ed.gov/fastfacts/display.asp?id=84
And now this article has now dropped off the front page in rapid time.

I don't get what the aim is here. Why bury a story that everyone is going to know about soon enough?

Edit: to the numerous people who are voting my comments down, could you please provide actual feedback?
I started working with angular 7 this February and I have to admit the learning curve was steep at first but after the slow start I quickly built my first project and now fully appreciate its power. I also think I am lucky to have taken a stab at it in its current stages, 4+ as I lost my patience for too much noise and too many changes. I also have many praises for Visual Studio Code. The reasons you mentioned are very valid and thats the reason Angular got adopted by enterprises. The uniformity the framework imposes on the projects makes it easy for other devs to jump in, to pick up a project done by somebody else, etc..

For all people who resent SPAs, continue using all jquery and other libs for small or existing projects but do consider a framework like angular if you want to build a stable web application (or a suite of web applications), you will appreciate it after your initial dive.
I also recommend a youtube channel with clear non ADD turorials: search for ‘kudvenkat angular’ on youtube.
I had a number of theories (involving arrays newly allocated, where they should have been reused in a managed stack, and extensive heap allocation, clamped array implementation, side channel attack mitigations running wild, etc). However, as it turns out, it's apparently about hardware acceleration (and probably about some overoptimistic assumptions made).

I.e., I just tried on an old MacPro (late 2008) with hardware acceleration disabled (Settings -> Advanced -> System -> Hardware acceleration + restart) and it runs smoothly.

Edit: Just updated the page accordingly. Thanks to everyone who helped in focusing on the matter of hardware acceleration!
Tell me about it. I can see now the rest of my career is going to be "how, in any way, can I make this place just one tiny step closer to what I experienced at Google?"
You're right. Still, I think it's terrible that 'you shouldn't talk to the police'. Talking to the police should be a safe thing to do. There should be trust between the people and the police. Police need to be able to talk to people in order to understand the real problems that need to be solved.

My goal is not merely to not get fucked by the police, my goal is a better, safer society.
I typically use Algo for this

https://github.com/trailofbits/algo
This might not be a popular take, but I think there is a serious issue with the way we perceive education, at least in the US. A previous comment noted how this needs to be a business decision, and it appears to me that's precisely the issue.

Increasing costs and other factors has led to education being treated as an investment to improve your standing in the workforce, as opposed to being seen as a net good on it's own. Society benefits from a more educated population overall, but through the connection to employment, wages, etc, as a collective we seem to have lost sight of that.
That's not what I was suggesting at all.

If you control the cell infrastructure you absolutely can put cellular capabilities into products that aren't explicitly advertised. That would be a bigger risk for surveillance tech.

Your complaint ignores my original statement about controlling both components (cellular and device). There is no need to tamper with someone else's TLS-secured communications or anything, you can just plant cellular capabilities into the devices.
I've resorted to using a third-party tool that periodically updates the Active Hours setting, so that Windows will never decide that my desktop has been idle long enough for it to be okay to install updates, reboot, and dump all the stuff that I have open. That way I can apply updates when it is convenient, and cuts down considerably on the swearing when I come in on a Monday morning.
World's high-net-worth powerhouse gets a taste for superyachts
KVM requires more resources than LXC (Linux containers).
I don't imagine it's more than 20% and I expect it is substantially less.

Why do you think so many colleges have so much housing infrastructure?

Most people study grew up in places without any decent universities within commuting distance.
Teslas send loads of stuff back to Tesla servers which I'd assume are in the U.S. It's not an unusual thing to do in this cloud-happy day and age.
You have more benefits such as sharing resources between containers (page cache, unix sockets, reflink copies, shared memory IPC) etc.

Exposing GPU resources is also a lot easier with containers than with VMs.