skysight-inc/HackerNews huggingface dataset:
The prefrontal cortex (the region of the brain associated with complex planning) isn't fully formed in a person until they are in their mid-20's. Of course they are going to make poor decisions.

Why aren't parents guiding their young adult kids more through this process? Or at least reminding them of the consequences of their choices more?

(Disclaimer: I am the father of two kids over the age of 19)
Pivotal: Comprehensive Support for OpenJDK, Spring, and Apache Tomcat
Related: Japan's birth rate is 1.43 children per woman now, far below replacement rate of 2.1. If the trend continues forever (which is a silly assumption) the Japanese people will completely disappear by the year....2500. I don't think we need to worry about extinction.
https://www.telegraph.co.uk/finance/economics/12068068/Mappe...
If you take a look at LXC and LXD, I would very much argue you can use them as a security boundary. One of the main problems with Docker is that the most powerful isolation primitive available in Linux -- user namespaces -- is not used by default and doesn't fully utilise the underlying feature. LXC uses unprivileged user namespaces by default, and LXD defaults to user namespaces as well. You can even isolate containers from each other with a basic config option.

All of that being said, this bug is caused by container runtimes trusting the rootfs too much. This is something I've been trying to improve but it's definitely not a trivial problem (lots of things require trusting the container processes in specific ways due to limitations in the corresponding kernel APIs -- though I am working on fixing those too).
I tend to agree. But in defense of the SPA, my experience is that over time, most screens accrete complexity.

You start out with a simple content screen. Then the client wants comments. Then they want richer comments. Then they want live comments. Etc.

Over time, most of my web applications tend to require richer and richer interactivity on each screen. As a result, it's nice to have started out with a client-side framework, rather than hitting some threshold where you suddenly need to switch things over.
Ruby/Rails backend with a React FE seems to be pretty popular these days, and is where I spend most of my time, but honestly I'd rather go back to Rails views with Stimulus for some of the components that need it.

3 years ago we were breaking monoliths into microservices, now it seems that we overshot that, and I'm much more likely to see people sticking with one main monolith, and maybe one or two other services. Similarly, I'm much more likely to see people choosing NOT to use JS frameworks these days than use them.
"When that material then started to smolder downwards out through the floor of the chamber, it threatened to come into contact with a large amount of water that had pooled there as a result of early firefighter attempts to put it out with hoses. This would have ignited a second reaction that would have been the equivalent of a 5 megaton explosion. It would have leveled Kiev and Minsk, and would have ejected the nuclear material from the other 3 Chernobyl reactors with a force that would have rendered much of Europe uninhabitable for hundreds of years. With only days to stop it, Alexei Ananenko, Valeri Bezpalov, and Boris Baranov went into the ruins of the plant, knowingly facing almost certain death from that level of radiation exposure, to release valves that would drain 5 million gallons of water."

Is this really true? Are there better sources than this blog post?
I am very thankful for my theory heavy CS degree background because now that I'm in the workforce I have realized that I and literally of my web dev colleagues are just doing shit very poorly that was well studied, classified, and generalized 50 years ago.

How many different ways can we create a simple state machine? With modern javascript frameworks the ways are endless and needlessly complex.

The worst part is that NOBODY KNOW THIS because they're all just code monkeys.
'Every Asset We Deploy in the Field Has the Potential to Become a Sensor'
Open-sourcing the Lightning Web Components framework
US Huawei Ban Threatens Internet Access in Rural Areas, Some Providers May Fold
I don't see how the trade war fixes the possible security issue caused by a potential OTA update in a potential conflict, a solution would be to make illegal OTA updates for critical hardware and software without getting the update reviewed. So military or other important things would buy only products that are reviewed and with updates that are signed by the government.

Or even simpler have this hardware and software setup to only get OTA updates and commands only from central command.

This feels so hypocritical considering that many PC around the world run CPUs that have Intel ME or equivalent and there is no media coverage of known backdoors in CPUs(I know technically it is a fully featured remote management feature that had some bugs in the past but Intel assures us that there are no more critical bugs and for sure no intentional bugs and this enterprise feature is also included in all CPUs not only in enterprise ones)
If you don’t have a college degree your choices of companies who are willing to even talk to you for a well paying job is very small.
Business owner != electrician.

My wife is a doctor of physical therapy who owns her own business. Most of her job is marketing and paperwork.

If you want to throw the title Business Owner in front of a career title, I'd still suggest Electrical Engineer business owner over Electrician business owner.
Probably because it's trivial to cut facebook out of your Internet experience. Google,... not so much.
Yes, but what's the threshold? What's "small"?
It would be legally required to be opensource, whereas with BSD it wouldn't. That's all I argued. Whether some country will try to enforce it via whatever means is another question altogether.
No I am talking about more directly. As an obvious example, in wartime everything goes to support the defense of the nation and is shifted to support that goal.
The whole point of this article is that people are experiencing buyer's remorse over their degree - framing this as a choice of whether to go to college or not. If you have the choice (which you absolutely do - I know people who were entirely capable of going to college and didn't - I'm not sure what you're getting at with the Down's Syndrome reference), to make the choice not to get an education puts you at a disadvantage and lowers your odds of being successful in the workplace.

I'm not saying the current situation doesn't suck - but these are people trying to make the most of it by doing what they think is the best move for their situation.
Containers' raison d'être is to provide isolation. Just like chroot, they are used for security.
If the security mechanism fails, it's good to have defense-in-depth, as usual.

From reading the article it appears the issue is in Docker, not the container mechanism offered by the kernel upon which Docker builds.
I hadn't done rails in a while when I brushed up on it, and found Turbolinks to be a game changing addition.

SPA's just require way too much work and fine-grained detail for starter applications. I would not recommend to do full-stack node over rails if you care about iteration speed early on.
Waiting for the cinematic version of the TVA disaster that released more radiation than any other event i n the USA. Oh, wait, thats coal.
Social coercion goes both ways

https://www.bbc.com/news/world-middle-east-44411333
When the JIT really gets rolling mainstream, it could help quite a bit. Performance (3x over v2) is a primary goal of Ruby 3.

https://developers.redhat.com/blog/2018/03/22/ruby-3x3-perfo...
Current stable version Ruby 2.6.2 with --jit is actually faster than Python 3 according to this: https://benchmarksgame-team.pages.debian.net/benchmarksgame/...
Random bit flips is a much longer time frame than we're currently seeing. Also, any services should be restartable at any time, so the only random bit flips that should matter are those in the kernel itself. The kernel data should be significantly smaller and so less likely to have a bit flipped.

If uptime and availability become a serious concern, then a partitioned system in which kernel data is in ECC memory while the remainder runs on cheaper non-ECC memory is possible as well.
> I had a UAV related startup several years ago and got to know some of the security folks.

Oh, excellent, you are confirming that 'spying' issue is real and you seem to be the one who can give us some real insight - can you provide names of "the security folks", maybe some links to their research where we all could see proof for all these claims?
Does anyone know if they use encryption and access control to granularly regulate access to data? For example, the part of the system that feeds data to advertisements shouldn’t have access to my private messages (in my view that would be a huge breach of trust with users.)
The Unix process, with its uids, is also a form of isolation. But most reasonable people would guess that there are undiscovered privilege escalation bugs in any given kernel and thus be careful who is allowed to put code on a machine.
That is not what is wrong with the plane.
Do you know what changed in Chrome that caused the slow down?
Dude... Not to be a dick but you claim you have experience yet you're signing away half your company without seeing a dime and with clauses that explicitly state they don't ever have to actually pay you? None of this adds up. I have zero experience with getting funding and even I'd insist on a 10% down payment minimum. Otherwise wtf was the point of getting an investor?
This has nothing to do with convincing the general public. The US is struggling to convince their own allies that the threat is real, and definitely haven't convinced the technical community they need to stop buying e.g. Huawei hardware.

> The existence of the threat is already well publicized.

Parroting the same vague "there's a threat, but the threat is secret so we cannot tell you about it" isn't well publishing anything. It is bordering on fear mongering. A well publicized threat would be a series of white papers describing in technical terms the weaknesses/backdoors/etc in Chinese manufactured hardware.
With the amount of object allocation in standard Rails behavior, it seems to currently perform worse in most applications. But it's a stepping stone for the future. Basically, it's there - but few/no people are using it.
The design process at Facebook is, to put it charitably, a bit minimal. "Move fast" is taken to mean start writing code immediately, then iterate on that to approach the desired outcome. Developers are rewarded for landing code in production each review period, even if that code provides little benefit, will need to be rewritten, and might even be buggy. In the rush, careful design and testing (which might delay landing in production and result in a bad review) get pretty short shrift. Some might say that there's risk or waste either way, and that velocity rules all. I'm not going to say they're wrong, but it makes "software design at Facebook" a bit of an oxymoron.
Is that an unpopular opinion? I don't think I see many people who do argue about docker from a security standpoint. At least nobody credible.

Docker has always been sold as more of an development and orchestration tool than a security one.
I think the bias in analyzing these is that when it comes to hiring, I'm more likely to deal with an individual carpenter than an individual programmer.

With that said, I echo what another poster said. In the trades, it really feels like "the middle" is much, much rarer. Unlike, let say, programming, trades are usually an understood problem, where most of the challenge is in the execution (except for the design phase). That means after doing it for 15 years, people who are legit are actually REALLY good at it.

As a software engineer, Im not sure I've ever done the same thing (or even similar things) twice within a year or even a decade at times...
Ten times useless science led to useful inventions
At a glance, this looks like little more than an ad - I'm really not sure why it was posted here?
I have to be honest, I don't understand why people care so much about typed languages.

I almost never face type related issues, and when they occur they are the easiest to catch.
I'm sorry but that is just false. VMs provide strong isolation which can even be two-way with secure enclaves.
I understand what you are saying, but really how many alternatives do they have? What if you aren't interested (or just not good) at things that are in demand like engineering, computer science, or accounting? Does that mean you don't go? That significantly diminishes (like to almost none) the possibility of ever getting a job within an office environment. So you're stuck, do you wait tables for the rest of your life, grind it out in retail, or roll the dice and get a degree in a "useless" field?

The argument is always, "well there is always trade school" and that's true....for some people. I have the utmost respect for people doing trades, and the thing that most people skip over in this argument is that it is hard and often brutal work. Pulling cable is hard, building cabinets is hard, cooking food for 400 customers is hard. It can be absolutely crushing on the body, and not everyone can do it.

People going into extreme debt for a shot at an OK life is a massive problem, and personally, I don't think its fair to just say "well you should have thought about that before." I agree, they do need to take some responsibility to think things through, but at the same point, we as a society need to leverage their intelligence and work ethic, and give them a path forward in life. We don't do that now for the majority of cases.
I think you can do that bootstrapping, for example, with debootstrap. (I'm talking by memory)
Yeah, rails does look out of style. But node backend development is unpleasant (at least compared to rails).
Remember Big Cotton during the US Civil War? The south thought england would take the south's side because so much of their economy was based on southern cotton.

It didn't work. The south didn't appreciate england's disgust with slavery. England developed other suppliers and found replacements.

Nobody is ever quite as special as they think they are. This goes for all sides.
This also assumes you are using the current epoch. You could always be using a different epoch for that 32bit time.
Beam raises $55M for a connected toothbrush that lowers dental premiums
I've seen a sneak peek before and learned that things evolve pretty quickly at this point :) Cannot wait to see where all this goes, congratz on the release!
A) Having a different color space is a violation of spec (H.264 profile's Baseline, Main, and High all define yuv420p). Don't expect your decoder to present these properly.

B) The issues you're seeing with background banding are _not_, primarily colorspace issues. While having a larger colorspace helps, these are largely related to the way quantization is done for the macro blocks in h.264.

The original h.264 spec (which is baseline and main profiles) only had a exponential quantization matrix.

During quantization we are "rounding" to the nearest integer for pixels. If we imagine each macroblock only had _one_ frequency coefficient. Dark scenes would have a low coefficient, say 1.4 If we round to 1 that's a 28.5% error in the rounding. A brighter scene which is at 9.4 has a rounding error of only 4.3%.

Custom quantization matrices and non linear quantization matrices(which are available in newer codecs) help deal with this.

Advanced h264 encoders have variance adaptive quantization technologies to help choose what level of quantization to apply to a block.

In short: h264 has technological limitations that are not caused by colorspace and the encoder doing this encode doesn't have strong AQ.
The performance improvements that came with the Quantum update were what convinced me to return to FF.
In a democracy, the state shouldn't be your enemy either. The state should represent you, as should the police.
Even with the most theoretical CS degree you should still be qualified to get an entry level programming job. Maybe not at FAANG, but theres enough demand for programmers out there that having any related degree is often considered good enough for a highly underpaid junior position that can grow to normal salary after switching companies 2-3 times.
Isn't this the US's fault for letting manufacturing move to China in the 1980-present? Any large global migration of industry will have this same threat eventually.
Yes the key thing the Ruby JIT needs to eventually do is reduce the load on memory allocation and the GC - that's where the benefits will be in the future.
>>imagine Islam continues to fail to really integrate into nations and, through raw fertility rates, starts to become the dominant factor in a generally liberal nation

One fallacy in this type of speculation is to assume that Muslims in the West will continue to have the same fertility rates they did in their ancestral countries. Maybe the first generation will, certainly not the second.
Every country has excuses. Russia is cold. Brazil is poor, can't afford paying for clean energy. China is making everybody's stuff.

Canada's emissions don't come from its empty land. Half of its electricity comes from hydro power (https://en.wikipedia.org/wiki/Electricity_sector_in_Canada), which is used for heating in a lot of houses. Canada has among the world's worst CO2/capita emissions because of its oil sector, and because most Canadians have big houses, big cars (2+ per family), high consumption, and frequent air travel.
My counterpoint is Excel.
Would be interesting to see the spec required for doing the same thing, but with 99.9% uptime.
1. I didn't arrange it, it basically landed in my lap. I was near homeless, and I was lucky that my firm found me on some job board. I think the main qualifier they wanted was somebody knew some amount of Linux and programming, who could learn anything quickly, and didn't come with too much baggage/experience of how "things should be". If you want to apply, look up (edit).

EDIT: I'm probably forfeiting my referral bonuses by handing out that information. Better to contact me: g@yabasic.net

2. I worked almost 2 years at Google, you're damn right I do. I still work for (edit) at a different assignment to pump up my SRE experience though, so I don't know what the effect will be on future prospects. I imagine having Google, even as a contractor, looks good on a resume. In either case, the experience was invaluable.

3. This gig MADE my career. Again, I was homeless, jobless, no real experience of any worth, and now I'm making 6 figures in San Francisco with extensive knowledge of cloud computing, application design and architecture, SRE principles, etc. We'll see where it goes from here, but honestly I prefer the coding side of things, so I'll have to put in more work to learn to pass coding interviews if I want to get away from SRE/Ops work. That's something you can't learn on the job, which is really the only way I tend to learn things.
Except the income for just a HS degree has also gone down. This chart (https://en.wikipedia.org/wiki/Educational_attainment_in_the_...) shows that, at least as of 2016 and in 2016-adjusted dollars, those with just a HS degree are making less than they did at that time too.

At the same time, earning for > Bachelors degrees has continued to rise (https://ourworldindata.org/uploads/2013/07/ourworldindata_ch...) suggesting that, as others here have noted, the ubiquity of college has driven the marketplace to reward higher degrees in the way that it once rewarded a bachelors. Although that's probably a bad thing from the perspective of student debt, since it means students will need to attend school even longer at higher cost to compete.
It’s not really extinction that people worry about. It’s insolvency in virtually every social program the government runs.

And it really doesn’t take much because those programs were created with very generous predictions in growth. For social security the insolvency date is 2025 according to our own governments accounting.
It seems to be a static site, so traffic surges should not lead to significant CPU spikes. Maybe the RAM and network controllers pulling a bit more power?
I always read it as "the featured article".
Have you ever tried to downgrade a modern browser? Every browser has an auto-update mechanism built in, usually running in a separate process (Google Updater is the Chrome one, iirc) that apparently was installed alongside its respective browser and given permissions to manipulate all of the files belonging to that browser at will. It is exceedingly difficult to remain on an earlier version because these processes are so hard to stop, and most browsers don't even give you the option to ignore automatic updates any more. Even if you do manage to, expect to be harassed every few minutes by popups helpfully offering to update your browser.
Well of course. Every country has at some point been hostile to it's own citizens or some segment of it's population. It's something that the citizenry need to push back on and keep the government in check. But by and large, the US is no where near as adversarial to it's citizens, companies, or infrastructure as China.
But that profit doesn't accrue to the franchisee, who is the one paying for equipment and labor. Franchise fees are a cost to him/her.
Debugging Native Crashes in Electron Apps on Windows
The best solution I've found so far is setting your internet as a metered connection, then telling windows not to update over a metered connection. The OS complains every time you boot up, but thats a small price to pay for control over when an update is installed.
Why don't people run containers in VM's? I don't get it, the only real selling point I can come up with for kernel level isolation is ability to over provision ram. And you shouldn't do that on a server anyways.

It's perfectly possible to fire up a regular docker container inside KVM or whatever. With constant container security issues, why isn't this the norm?
I'm hoping that Apple News+ and similar models start to take off. It's not a cure-all, but if there's a huge take-up it could help a lot. I have a NYTimes subscription mainly to spend Sunday reading a big heavy newspaper made of paper (and to support journalism), but other than that I read stuff from all over and there's no one place I read everyday. I'm happy to pay $X/month and have it split up between a bunch of different places depending on what I'm reading...
Ironically, states are willing to spend more on a prisoner than a student at a state college. No one talks about reducing prison time for meaningless drug crimes to save money, but every year they contribute a smaller % to student tuition because there's not enough money.
twice as long?! That is nuts, what's the math on that. Am I wrong in understanding that to mean, e.g., in lots of places the life expectancy was 40 and now it's 80?
My point isn’t that everyone should quit college and join a trade union, my point is that it can be a viable option for a lot of people, ESPECIALLY in lieu of taking on a bunch of debt at a young age.
> it feels a bit reductionist to act like all of the problems of student-load debt can be expressed as just people choosing expensive schools and are too lazy to work while going to school full-time

Who said "all"? I will assert, without data because per-school or per-school-type data is hard to come by, that most of the debt problems are caused by students choosing (or being pressured) to attend expensive private or out-of-state schools with insufficient financial aid.
You can click `undown` if the downvote is accidental, it remains available for an hour or so after the button is clicked. (I can't remember the exact time, but it does expire at some point.)
The change in the landscape. When RT was released ChromeOS was very much in its infancy, and Edge was 3 years away. It was also Windows 8, which was a crock in its own right.