skysight-inc/HackerNews huggingface dataset:
It really depends whether you want to compare similarly-configured containers or the defaults.

If you compare the defaults, LXC wins overall because they have rootless containers and user namespaces by default (runc has them too -- I implemented them -- but it's not the default in Docker). To be balanced, LXD's isolation of individual containers is not on by default either (because of backwards compatibility requirements) -- but Docker doesn't have an equivalent feature. If you configure a Docker setup to be as-close-as-possible to an LXC setup, then it's much harder to give a definitive answer. Generally, the containers we set up look almost identical from the kernel's point of view so we have similar kernel 0day problems. So it comes down to the security of the runtime in particular.

I am currently working on solving several pretty fundamental security issues that exist both within LXC and runc (and many more programs generally)[1], so it's not like either is perfect (though LXC does have more code to defend against the attacks I'm working on fixing). LXC does make use of more of the kernel hardening work that we (both the LXC folks and myself) have worked on. A trivial example is that LXC uses TIOCGPTPEER (a feature I originally implemented that allows you to avoid certain theoretical attacks by container processes against the runtime) but Docker doesn't use it (and because runc doesn't have a container manager by design we can't implement it in runc). LXC also supports using pidfds (a new feature in Linux 5.1 that Christian Brauner has been working on for a while) which allow much nicer methods of avoiding PID recycling race conditions -- with runc we still use the old pid+starttime method which is prone to well-known (though usually harmless) attacks.

Funnily enough, I'm actually giving a talk about this topic at the end of this week[2] and was writing slides when I saw this thread. :P

[1]: https://github.com/openSUSE/libpathrs
[2]: https://2019.container.camp/au/schedule/securing-container-r...
I'm guessing that they're from a country where second grade means something different. That or I should have been looking for this school that teaches ray tracing in grade 2...
> When companies like Amazon do things that are morally wrong

Companies don't "do things". The managers (and ultimately Bezos as the top manager) are the moral actors here. "Amazon" is just shortcut name for all the people that work there, this set is ever changing.
Yeah, when the zombie apocalypse starts you're in a bad spot.
I meant second year in uni. Too much thinking in native language I guess.
Some people aren't going for cheap and quiet though. People who buy rack mounted home servers are doing it as a hobby unto itself.
I visited Kenya last November and used their local Uber quite a bit. This ended up being a very effective way to meet technically inclined and entrepreneurial Kenyans. Talking with these people gave me a lot of optimism for their future, there's a lot of hunger (unintended pun...) and talent waiting to be utilized there. I really hope they continue to see development that will leverage and grow their technical skill base.
So you just have to track who bought the book (eg. ask Amazon) to find potential suspects!

It reminds of https://www.marianne.net/societe/attentat-colis-piege-lyon-a... : someone built a bomb using Amazon Basics batteries and acetone bought on Amazon
I would have used Rust if I hadn't already put 10 hours of work into an assignment to write a basic ray tracer, which had to be in C++ unlike the final project.
UDP is just an IP packet with port information. That is all. That’s why it is so easy to do something like TCP/UDP instead of TCP/IP, even though nobody calls it that. TCP over TCP is bad because the protocol uses congestion for traffic control, and if the underlying connection is lossless and never gets congested, the inner TCP layer cannot work right.
Kitchen disruption: better food through artificial intelligence
How is this "stealing", if Amazon advertised the price they sold the product at?
And a built-in UPS.

But be careful of cooling, if you want to run it with the lid closed.

Also, if you want to run RAID mirroring, a used ThinkPad might only have one 2.5" drive bay, and no M.2. But if it has an UltraBay of some kind, you can buy a SATA adapter.

(Personally, the last 24/7 data (not compute) server I built for home, I considered a ThinkPad, and I also previously had IBM 1U and beige box Linux servers, but decided to go with a mini-ITX Atom board designed for fanless use, and set up RAID with fairly cool-running and homogeneous drives. It worked very well, and silently. There was one drive failure (possibly because I stacked them in a bracket in a small ITX case rather found a way to space them out for better cooling), but it kept running for years more after I replaced the drive, and eventually I sold it.)
And the resection of a solid tumour inevitably involves the killing of perfectly healthy cells.

- If you do nothing, sacrifice continues indefinitely.

- If you intervene, you'll likely cause a short-term uptick in deaths of would-be sacrifices, with the goal of completely ending sacrificial deaths thereafter.
You got them on meters and liters as well?
If you already have OpenSSH installed, it has a built-in tunnel you can activate with a single command-line argument that exposes a SOCKS server on localhost.
Citing from an early-web travelogue:

> On average, three bikes are stolen from a Norwegian in their life. Question: how many bikes, on average, does a Norwegian steal in their life?
Note that "time reversal" is a common accurate technical term. The problem is that you get one or two clases in an advanced QM class explaining what it mean and what it doesn't mean. Using it in a title in a non technical publication is misleading (or clickbaity).

It's easy to explain what they did with an unrelated experiment:

Let's imagine that you make an experiment where you have a few ball laying on a billiard table. You hit one, it colide with the other and you wait tome time "t". Let's assume that the walls are magic and the ball bounce perfectly without loosing energy.

Now with some very accurate device you measure the position, speed and spin off all the balls, and then with some combination of magic and very precise actuators you create an scenario where all the ball have that positions, with the speed in the exact oposite direction, and spinning with the oposite spin.

If you wait again a time "t" you will see that everything goes in the other direction and the ball return to the initial position, like a movie shown backwards. So it's like "reversing the time", but you don't reverse the time in the "clock in the wall", you only make the system apparently move backwards.

With a quantum system with particles or pseudoparticles it is easier to have perfect collisions and perfect walls that don't loose energy, but you can't measure the position and speed at the same time, so you can't recreate the scene like in a classical system. Also, the balls may be entangled and have other nasty quantum stuff.

The trick they did is to use a quantum system to simulate a quantum system. The operation to reverse the direction is related to complex conjugation. IIRC they simulate the real and imaginary part separately to make it posible to reverse the imaginary part and simulate the complex conjugation.
The good part of the complex conjugation is that it work without measuring the position and speed at the same time that is impossible in a quantum system.

So they star an experiment, wait "t" time, take the complex conjugate, wait "t" time and (most of the time) they return to the inicial configuration.

The second part where things move backwards is call the "time reversal". They are not making the wall clock go backward, only the part of the system move backward.
Thanks for your comments.

My intentions are a bit less noble though. By listing alternatives, I am trying to draw attention to the pricing (my service is much cheaper) and to set expectations to match the pricing. I think some users might see this as a taunt of sorts.
My dad has a box of punchcards for code he wrote in his university class, well before ‘98. I think all of my own 90s era code was on floppy disks that may or may not still be readable.
Moving right now to the HPE ML110 gen10 because I wanted 8 disks that were quiet. (Previously was using a microserver gen8 with an external enclosure.)
Suppose you tunnel wireguard traffic through a plain-jane unencrypted TCP connection?
For a proper exchange of ideas to function, the listening side has to try it's best to interpret the message as intended. Yes, to a degree does that include ignoring misuse of language. That obviously doesn't mean you can never give any feedback.

> educating people such that they can properly discuss a topic using the proper terms

Where did you do that? The only recommendation for a better term I see is "harmfully disproportionate market power", still quite a usable mouthful and made by someone else. Your contribution seems to boil down to "your wrong", and I'm still unsure if this is intended to be about the use of the word or the actual point. Probably both, with one being secretly used to support the other.
Algebraic Effects for the Rest of Us
Neil Whosis? What you don't know about the 1969 moon landing (2014)
DevOps’ish 137: 3% k8s, Open Source perception, CIRT, Linkerd 2.4, TTY, and more
Compared to Wireguard, OpenVPN is easy to set up wrong but difficult to set up right.

Most people configuring their own OpenVPN installation will think the job done when it begins functioning, but there is a difference between functional and secure; just look at telnet! OpenVPN makes it too easy to create a system that 'works' but isn't secure.
Pearson vs. Chung
Agreed, my take on the same subject although from 2 years old, but I would make the same decisions still (though maybe switch to AMD Ryzen mobo and CPU;-)

The Fractal Design Node 304 box is awesome. It's quiet, can host 6-7 disks although it doesn't have hotswap design. In practice opening the box and switching disks is not that common problem and the design makes the HDDs quieter than hotswap bays.

https://medium.com/@trm42/building-backup-server-for-photogr...
No, the experiment takes "2t" time, "t" in the initial part and "t" in the backward part. I wrote more details in https://news.ycombinator.com/item?id=20491309
Well there is research that shows that we don't have free will. Nothing has shown we might have free will. Neither of us are free to think anything.
I'm not sure if they changed the marking scheme by the time I took the course, but I think they added advice to pick 10 easy things for your plan even if you are ambitious, because the elements of your plan are only marked on completion not difficulty or quality. Then just do the other things as bonus objectives which have their own category, and the quality will be put in a different category.

There's also marks for artistry and humour, and getting perfect in the other categories doesn't require as much work as I put in. I didn't get a perfect mark and I suspect it's because I blew past the cap for technical difficulty but lost some marks on artistry and originality.
Just install anaconda. What could go wrong?
Oculus switched from Perforce to Mercurial
Or maybe they're just using terminology that has been used for hundreds of years to talk about invasive species.
كلمات اغنية عدى وعدى محمد سلامة
Math Invented for Moon Landing Helps Your Flight Arrive on Time
Somehow my brain didn’t catch Steve and the pig coming out of the monitor in the top hero picture, and I spent most of the article thinking that first render was a photo of the authors desk.

When the Mandelbox came up I was fully expecting some sort of explanation about how they thought it was so cool the author had to 3D print it.

At this point I was like “I wonder if they are going to model their desk from earlier?” I was actually delighted and ecstatic when I figured out my mistake! Wonderful work, truly.
Sunday: Songs of Hope for the Oppressed
Front end hit to /article/page-not-here triggers a search in the back end, /search?q=page+not+here.
It’s being downvoted because it’s a boring tired comment that adds nothing new. These discussions are had in nearly every thread.
Hello everyone. We are building an SDK tool for mobile developers who have many apps in the store. Literally we are building a tool do add features from remote, increase experience of users and monetize smartly. Enhance the experience, constantly engage users and increase value over time. Participate in the largest mobile phone market by investing minimal resources in exchange for large profits. Build a business based on data, informations, user experiences and create an increasing passive income system.
Invitation website for mobile app publishers.
http://bit.ly/megageneralinvitus
About the tangential point about the paintings of Mark Rothko compared with those of Monet, I think people would be more open to enjoy that kind of art if the creation of those works didn't carry any prestige.

I think what people find distaceful is when the creation of those works is supposed to carry the same prestige as the creation of a universally aesthetically pleasing work, in the case of the aesthetically pleasing work the bulk of the effort is on the side the artist, while with non-representional work the bulk of the effort is on the side of the viewer changing his perception and opening up rather than on the side of the artist who may just drip some paint on a canvas, or hang an empty canvas.
Ouch, you're right! I misunderstood.
Publicizing unproven charges, and allowing "mugshot extortion"-style web sites to operate, is a large part of this.

In many other countries, crime reporting has to happen in an anonymized way until conviction.
He liked the content?

I used to read programming books cover to cover 25 years ago when I was in High School/College. I don't do it so much these days, the books aren't as useful and I know too much so most of it ends up being redundant now.

If you're learning something new you can consume voraciously.
Get a daily feed of your Twitter timeline to your inbox, no more FOMO
Telco’s have harmed privacy by sharing location data tracking, and adding injections to web traffic
> The majority of participants considered visual-tactile stimuli to be simultaneous if the haptic response was played less than 50 milliseconds after the visual response. In our glove demo the haptic response was only 20 milliseconds after visual. Well within bounds!

> Interestingly, the stimuli were not considered simultaneous if the haptic response played more than 20 milliseconds before the visual response. This is a generous window of 70 milliseconds; but it's not centered at t=0.
"yet" is a term billsfully optimistic and ignorant of chinese strategies
Even simpler for some use cases:

`ssh -D 1080 -C -q -N root@your-vps`
I Am Sitting in a Room
> The reason to use float16 isn’t to make individual operations faster, its to fit more numbers vector registers. For example, AVX512 vector registers are 512 bits. That’s 8 64-bit floats, 16 32-bit ones, or 32 16-bit ones.

I'm unclear on the advantage you are trying to explain. If both AVX and bfloat are SIMD instructions that cannot be the reason implementing bfloat is better. I'm expecting something like "bfloat16 is more specialised so it can have larger registers" or something?

[Edit]

Sorry re-reading your comment, I think you are trying to say that. The key part being:

> fit more numbers vector registers

(vs AVX i assume), so adding bfloat16 would provide more registers vs AVX with similar gate usage due to greater specialization?
Liters don’t come up much and those are going to be a lot harder given that every gas station is in gallons only. Meters no, centimeters yes. They are 6 so they mostly measure small stuff. I use grams for cooking too. Who thought that “1 cup of cheese” was a reasonable measurement?
I want to be careful, this could get holy war-ish...

So I do not want to sell anyone on changing their view. This isn't advocacy. But just want to provide one illustration of why someone may prefer Fahrenheit.

When I travel, hotel rooms generally let me alter the temperature on digital thermostats by one degree. In the US, that's great, that's plenty of precision. In Europe, I lose fidelity and am strictly worse off.

If people like a room set at 71 degrees, they don't like 72 or 70. If they like it at 75, they aren't secretly shooting for 76.

When I'm cooking in an oven or sous vide, I often want to tweak controls very precisely in an attempt to balance the carmelization of sugars or the rendering of fats while leaving proteins or starches intact.

Room temps, weather, and cooking are the ways I mainly interact with these scales. In each of them, the precision of the base unit in F is strictly advantageous to me.

Celsius can absolutely allow greater granularity, if everyone used an extra significant digit as a rule. I blame psychology though, people and systems often just don't bother to think that way.

I wholly support the metric system to unify measurement across different scales. That's neat. But as I rarely need to talk about millidegrees or gigadegrees, it seems less relevant to me in this context.
It's a classic piece written by a Vietnam War veteran: Why Men Love War (1984) By William Broyles, Jr. https://www.esquire.com/news-politics/news/a28718/why-men-lo...

Boyles is a screenwriter who was involved in writing in the movies like Apollo 13, Cast Away, Jarhead, and Saving Private Ryan.
Fortunately she had quite the grim sense of humour to help her deal with the cases she worked on.

Unfortunately, even a sense of humour doesn't protect you from PTSD when dealing with this sort of stuff, particularly on a daily basis. I recently listened to the audio book version of Dr Richard Shepherd's "Unnatural Causes" [1]. It's all very fascinating, and he's clearly passionate about his work while also providing a great service to society as a whole but as becomes clear, it has also affected his mental health and family life.

[1] https://amzn.to/2LBaOF4 - (The audio book is excellently narrated by the author himself; that doesn't always work out well, but it does in this case.)
To be fair that is a general UNIX issue.
> We're talking about an employer making reasonable accommodations for an employee with a disability.

Are we? Either attendance at the office is vital to the job or isn't. If you treat different members of your team differently you will annoy them, damage morale and damage your team.

> Maternity leave is another instance.

If your paternity leave isn't comparable to your maternity leave that's not OK.
Somehow I think Tru64 and HP-UX vaults had it first.
If you’re okay with less airflow, you may be able to run the fans at 10V if you have a -5 and +5 available. Or just run a few diodes on the 12V supply to the fan to get 0.6x voltage drops.
Wow. Clearly worth the trillions spent, good investment.
Part it out? I do that with my previous gen MacBook Air and usually get a good return.
It's not illegal to not have ID as a citizen, but several states and federal cases have upheld requirements that you must identify yourself when necessary, which is effectively the same thing.

The point is that you must have clear legal status and documentation, whether that's physically on you as a person (for green card holders) or available to be looked up (for everyone).
I've got noise cancelling headphones. My hearing decline has now slowed. I would recommend this to anyone. But a private office would be better.
Which is why I always harden Edge after setting up Windows by disabling SmartScreen
Thanks for sharing this, I wonder why more projects like this aren't under way already?

Sounds like the time to seriously start to consider these kinds of projects is now.
Honestly I don't find this approximation any easier than the exact formula. They're each three steps. I was actually more excited to learn about the crude approximation that's only two steps, and the "memorize one conversion and go from there" method.
"Rackmount server in home people so often brag about on the Internet is a very loud and impractical way to run network services from home, unless you have separate room for it."

Honestly, I can not hear my rackmount server. In fact, I was not sure that the fans are used or are even working. I just had to open it recently and just because of some dust on the front fan I know that the fans are actually running sometimes.
I have my home server in the attic, a 4U with a bunch of drives in it running ZFS. 4G RAM, Q6600 Intel chip - I've been running the same hardware for years. The fan sound is unnoticeable - it's on the other side of the insulation, and it's approximately located above my desk in my home office.

It gets hot in the attic in summer, but I've had no failures thus far (no hardware errors from overheating, no drives died). Dust filters on the fans need cleaning off every year or so.

I'm due to upgrade it, 4G ceiling is starting to get tight when using more recent software.
> Taking a sick day and calling on sick are two different things.

I think there's a locale difference here. Here in the UK, they very much are the same thing (faking sickness could get you fired if you're somehow found out), and we don't generally treat sick days as a pool to be drawn from.
How to create WebGL interactives from AutoCAD models
Sort of. You can make up your own mind to leave. Good luck violating EEO Laws.
The main objection I have is that a differentiable renderer is giving you the rope to hang yourself, it helps you work in the wrong space.

There is some special structure to the rendering problem, that is probably tackled better. One inherent difficulty for efficient solving is working with multiple hypothesis at the same time (which differentiable renderer makes you miss). Also there is some special structure of the probability space which is "once you know the position of the camera it is easy to render, once you know the position of the objects it is easy to locate the camera". This means algorithm used for SLAM are a lot more able to tackle the problem.

Techniques like Rao-Blackwellized Particle Filters, for example are more appropriate,
It doesn't need a differentiable renderer for them and you can combine them with neural networks for example for pose estimation https://arxiv.org/abs/1905.09304 .

What I try to say is that there is not a lot of useful extra information in a differentiable solver, and the information doesn't flow well. These gradients are on the detail scale, when what matters in on the large scale.

Sure they can be used to stitch model together but that's an unreliable stitch, and you won't know if your agent is not driving because he can't take the right decision or your agent is not driving because he can't process the scene right.

The gradients will also flow a lot better if you use a RL-model based approach where you ask the agent model to render what it think it sees and train it to match with the non-differentiable renderer. These gradient will be a lot smoother and on a larger scale.
Is Intel planning TPU's or GPU's?

I don't see how GPU with AVX512 can compete with TPU's or GPU's, BF16 or not.
Are you sure that -C is a good idea? Wouldn't it be possible in theory to exploit something similar to CRIME/BREACH?

> root@your-vps

People allow for root ssh connections?
I think you should learn Go if you enjoy writing Python. Also I’m a Python developer but I’m considering to switch Go.
Probably Contact X is Theo, and Contact Y is Bob Beck. Or vice versa. There's no reason to think otherwise, unless of course we're going to revisit conspiracy theories like the bullshit claims about NSA backdoors from 2010. But OpenBSD has always been a magnet for trolls.
SSDOptimization