skysight-inc/HackerNews huggingface dataset:
While that’s correct that is also just an artificial limit put on it by the Bitcoin core devs, who somehow think it is desirable.

Many other coins have the capability to support orders of magnitude more transactions per second and have been successfully demonstrated to do so.

In theory, with 10GB blocks or so, it could scale to Visa-levels although I’m not sure anyone has tested at that scale.
Totally agree with your first paragraph. Regarding execution, I'm not sure what Docker could have done differently that did not lead to the outcome we have today. I don't think that playing nice with other opensource devs would have made a difference (as the article claims).

Also .. the K was hardened at Google is BS. The ideas, maybe. But I am quite skeptical about the amount of prod internal google code went into early K (pls don't point at the Borg paper .. I'm talking about actual working code). I recall doing a deep comparison of swarm vs K circa 2015 and Swarm was clearly superior in both design and implementation. Today, K is better and has an ecosystem .. maybe the issue isn't that core Docker containers played nice with opensource .. rather .. swarm should have focused much more on playing well with others.

One point of contrast is Hashicorp .. they are in the workload orchestration and mgmt space and seem to be doing really well. Kudos to them!
yeah especially with Span<T> it's way easier to create high performance code, while reducing GC pressure.
Also depending on the Platform P/Invoke to C/C++ is also a solution that works quite better than on Java's JNI.
How to build a Hugo static site automatically using Drone CI and Codeberg.org
What's your process of editing client side JS? Is there some method to capture scripts before they load so you can make your modifications?
Which country are you suggesting implements this? Every country on earth?
Pieter was an outstanding writer. Everything I've read from him was top notch, from his ZeroMQ guide to the last blog posts explaining how he was dealing with the unthinkable process of getting his affairs in order because he know he'd die soon. I'll definitely add this to my reading list.
I jumped on the container bandwagon late and immediately fell in love with Docker. It built on my existing skill set so I was quickly able to get something up and running.

Then I started tinkering with Docker Compose and for a while things were great. But after a while I started running into issues. Compose felt artificially crippled. No secrets? No health checks? Pushing me towards Docker Swarm?

Eventually I just sucked it up and switched to Kubernetes even though I think it's overkill for my applications.
Docker is more than enough for most of the setups TBH, prometheus and what will work just as well. I would never recommend K8 locally, if you can even avoid docker it's a win.

It's just a matter of preferences, where you want to invest your time to learn etc... Kubernetes being the fully fledged "state-of-the-art"

I would just recommend the work of Stefan Prodan who's repository and blog are full of open and well thought devops work, even if you are just interested in K8 or only Docker
Btc protect. A file that protect you from fake btc transfer
I guess the fee is included in the monthly repayments, not charged up-front.
The Fremont factory is not manufacturing the batteries for its cars AFAIK. You're not doubling the output of entire vehicles there without GF1 increasing its battery production accordingly. Musk and Panasonic were already butting heads over battery production capacity @ GF1, but I haven't been paying attention lately.
Nah, plain old VMs over here.
The days of 1.3MB downloads:

http://www.oldversion.com/windows/netscape-1-0-rc-1
A couple of things :-

You can still mount filesystems as root from a container, if you have Docker command rights. In Docker's security model access to run docker commands on a given host == root, that's a design choice AFAIK, not an oversight.

It's perfectly possible to mitigate that issue, by restricting who can run containers and also ensuring that all containers specify and use a non-root user account (or enable user namespaces at the Docker daemon level)

Also, many early stage technologies don't prioritise security . For example, for several early releases of Kubernetes all you needed was remote access to a single port (10250/TCP) and you could get root access to the underlying host without any authentication...
I highly doubt Amazon makes 10x profit over what they pay their workers. My guess would be that they have very thin margins per worker, and just have a lot of workers.
I recently debugged through a case where this was a problem with non-ASCII usernames. Through an upgrade of an underlying docker image the default system encoding changed from UTF-8 to ISO-8859-1 and nobody noticed. This even passed QA since they always create new users in their test cases and the bug only occurred if you wanted to log in as a user with a non-ASCII character that was created with an old version of the service.

That doesn't mean the fault was not on us. We should've made the encoding explicit rather than relying on the system default.

Long story short, encoding problems can be tricky, even in 2019.
While I can appreciate more confrontational art it should be noted that they are signs of a profoundly sick society
Apple's Catalyst polarizes developers ahead of iOS 13, Catalina launch
Yes, indeed, its also interesting to notice that people struggle when one asks "Why isn't it?" One often gets strange statistical answers that don't really get to the root of anything.
Thank you, yes from reading that statement you’re definitely right.
I want to say that yes, if it's simple and straightforward enough or obvious then just do it - it should have been written like that in the first place.

BUT I think a more important consideration is readability and clarity. Make it work, make it pretty, make it fast - in that order. If there was anything I learned from a Go course some time ago (Ultimate Go iirc) is that speed is a natural result of readable code. Plus if your code is good and well structured it becomes trivial to benchmark, identify and resolve any performance issues.
So, Apple is launching an offering on par with Google's seven years later. Is that what we call innovation?
Study: German carmakers have catching up to do
I have never not seen code reviews end up being a massive social/cultural pain point for most people involved. Most people hate getting their code reviewed in depth. In situations where there isn't just one lead dev who is responsible for reviews, this leads to "Merge Request symbiosis", where two people uncritically approve each others requests so they don't have to deal with the third.
No, payday loans are a different and much more exploitative beast. This seems closer to a shared earnings agreement - Stripe puts in day 10k in exchange for 8% of your daily earnings, with a cap of 12k. If you do well cash out within a week, that’s that. Or your hypothesis was wrong and it takes three years to pay that back, that’s also fine. Your downside is capped at receiving 92% of your income until then, nothing more. No shakedowns, no legal threats, no jail time, no repossession, nothing.
Why would you be allowing devs to directly deploy to production in a company with 30,000 developers?

Surely you'd have proper release management where Ops teams would review deployment artifacts before deploying them?
Tile is worried about getting lost after Apple announces its item tracker
That is what they mentioned at WWDC yes.

Networking is part of the first wave by the way.

Networking kernel drivers are now deprecated as you can easily read about here.

https://developer.apple.com/documentation/macos_release_note...
Thanks a lot for your advice! Live demo used to be working on webcomponents.org - one service powering them has stopped working...

I launched this approx 2 years ago - using it in prod, but not had proper time to devote on better doc/demo/presentation. Looking forward to it during current migration to lit-element.
> my office backs up data, not code

No user's apps? No Registry? Ok, sneak it in Word document then. This delay thing can be applied wholesale, not targeted.
This reminds me of Joel Spolsky's fire and motion piece (https://www.joelonsoftware.com/2002/01/06/fire-and-motion/). To paraphrase a little bit:

> Fire and Motion. You move towards the enemy while firing your weapon. The firing forces him to keep his head down so he can’t fire at you. ... The companies who stumble are the ones who spend too much time reading tea leaves to figure out the future direction of Google. People get worried about kubernetes and decide to rewrite their whole architecture for kubernetes because they think they have to. Google is shooting at you, and it’s just cover fire so that they can move forward and you can’t
Show HN: A Fast and Lightweight Android App for Hacker News
The very idea of a "scientific theory" is a philosophical concept, and your implicit assertion that empiricism trumps abstract reasoning (which I am here neither agreeing with nor opposing) is in itself a philosophical position.

Pseudoscience refers to activities that superficially have the aesthetics of science but do not follow its constraints. For example, homeopathy is pseudoscience. They dress in white coats and use chemistry lab equipment, but they do not test their ideas with experiments that could falsify them. This has nothing to do with reasoning with the current scientific theories. What do you think theoretical physicists do?

I say this because more and more I notice people using "pseudoscience" in a sense similar to "heresy", and treating philosophy as some sort of inferior system of knowledge that is bound to be replaced by science. These people misunderstand both science and philosophy, and would benefit from a bit more of reading and thinking outside of their comfort zone.
I don't know a single company that doesn't hire great engineers.
> as a small developer

Do you need kubernetes?

I know the hype cycle is mad for copying big tech, but if stackoverflow can operate on a couple of IIS instances I’d argue that you almost never need kubernetes.
"Dominant market position" is the relevant term and considering that there are basically only two mobile OSs and iOS has a 70% share by money this "crucial difference" is non-existent.
Perhaps if you check the box the system doesn’t allocate the biggest clown in the circus to your check and you get someone who can reason like, it says Osama but the terrorist Osama is dead. So it must be someone else.
Spaceline: A Space Elevator That We Could Build with Current Technology
Catalina is only the start of a long term roadmap, so no not all drivers are userspace on Catalina, just the first set of them.
Your comment resonates with me and a book I recently read - Coders by Clive Thompson. It too points out how the emphasis has been on pure code, pure logic, merit over individuals, code over opinions, and of course the hero developer who doesn't want anyone else to work on their code.

Which of course is not reality. I mean I get it, I too would, I think, love to be a hero developer and just immerse myself into code for weeks on end, but that's simply not the reality. I don't write code, I contribute to a customer-facing website / shop, and at the moment my time and energy would be better spent adding a date picker than to fantasize about rebuilding the back-end in Go.
Dockerizing Node.js
The cynicism of Apple is pathetic. Steve Jobs is reported to have said [https://www.pcmag.com/commentary/329826/why-steve-jobs-went-...]:

> "I will spend my last dying breath if I need to, and I will spend every penny of Apple's $40 billion in the bank, to right this wrong. I'm going to destroy Android, because it's a stolen product. I'm willing to go thermonuclear war on this," the late CEO famously said.
That is a truly strange "feature" when people without running X or even tmux can cp on one tty and ls on another.
Whilst k8s can run on any CRI compliant runtime, I've never actually seen a prod. deployment use anything other than Docker.
You wouldn’t but you wouldn’t give every dev root access to every dev box either... would you?
Yeah, I've seen a similar restriction on mother's maiden name =/
I didn't say it was the same codebase. "Inspired" may be more accurate but the point still remains that the concepts in Kubernetes have a direct path to the concepts in Borg.
Ugh, I know the feeling - one client I worked for would only do deploys a few times a year if that, and only at night. I mean we'd get extra pay or free time for doing night shifts, but really, it's not good practice.
I have worked on a Google project as a contractor and I can confirm that over-engineering was our biggest problem. I was also partially to blame, but at the time I did not know better.
What's interesting, to me, about Docker as a company perhaps not doing well is how that'll impact Microsoft.

Microsoft have done a load of work on getting containers running well on Windows servers and that work relies on Docker EE as the container runtime engine (you get a free Docker EE license to run on Windows servers AFAIK)

If Docker get bought up (by someone other than Microsoft), then that would seem to possibly place Microsoft's container efforts at risk...
> If they were doing everything right but still got hit by ransomware

Then I'd say there weren't doing things right. Granted there should be exceptions for when they really did do their best, but generally no.

> Most security experts agree that no computer system is un-crackable

It doesn't have to be, merely needs being not worth the effort to the criminals.
To answer your curiosity, I use your wm and I love it, but:

It means I have to sign in to windows: I have to deal with it nagging me to change my standard logon to a microsoft logon. I then have to worry about all the other apps and their permissions, privacy implications now and in the future.

I have to give my credit card details to microsoft.
I can't easily take the software with me if I need to use another machine/laptop/tablet etc without having to, again, sign into windows in some way and have all of the above congnitave overhead *n machines.
Hell even if I make another local user account for testing or whatever I can't even use your software as I again have to sign into windows even though its working for my main logon.

It all adds up to another thing that needs managing/thinking about, which pretty much takes the convienience of (your software, in this case) away.

If you wanted to make it restrictive and painful for your users, you have succeeded!
How Skillshare decides how many options to give to their employees
It pauses the music when you stop looking at the app because they can use this to differentiate the paid app from the free one.

Try playing youtube in your mobile browser and note it works as expected.
The article pointed out -- at some length -- ways that the brave new gig job world is different: less training, more inexperienced drivers, more layers of contractors and subcontractors, drivers under very aggressive time pressure, drivers in vehicles with which they are unfamiliar, and drivers on routes with which they are unfamiliar. And for the coup de grâce, Amazon -- unlike Fedex, DHS, UPS, or the USPS -- worms out of liability for any of these accidents, eliminating pressure to reduce them.

Agree or disagree, but it's hard to see how you read the article and didn't see the extensive discussion of ways Amazon is more dangerous.
The one that actually tells you they store plaintext passwords is when it can't be close to previous passwords.
Yeah, that was the first section I read and I raised an eyebrow, I hadn't thought of it like that yet. I can see how one would get paralyzed by a focus on perfection; I too have left idk, dozens of comments on a feature PR of a few hundred lines of code.

Mind you that was before Prettier, nowadays a lot of these niggly things are automatically identified and fixed in editors and a pre-commit hook.
Less parts should also mean a more productive manufacturing process.
People actually use Google Music? Everyone I know who listens to music via Google-owned properties uses Youtube (free). Others use Spotify, Apple Music, and Pandora, in that order of popularity.
Building an RF Side-Channel Attack Using Machine Learning
I am concerned now because covering the world in solar panels and wind turbines is unsustainable. Each siting location by definition is worse than the one before. The vast land area required will cause tremendous societal and environmental impact. Problems of energy storage, rotating mass, and baseload power remain unsolved by wind and solar.

We need to get on nuclear. Then we can help poorer nations with nuclear power so they can undergo their own Clean Industrial Revolutions. In 80 years we all want the world’s ~11 billion plus people to live far better than we live in the West today.
Except now there is a more visible dollar sign attached to it. Before, it was hand-wavy what-if scenarios, now you can actually point at real world examples.
In essence, here's a full overview of what will be enabling a career path as a technical contributor with a focus on pentesting / red teaming for you:

1. Get OSCP

2. find CVEs (proper ones, not XSS in $random_github)

3. Publish good, detailed articles

4. Do talks at major industry conferences

Play some CTFs in between for learning and meeting people in the community.

Good luck !
I think you mean Bang with Friends
Replacing regular corruption, which is often "unethical but legal" or "barely punished", with a federal crime that is known to be harshly prosecuted doesn't seem like a great idea to me.
The most annoying rule that Microsoft and Nintendo use everywhere: Your password cannot contain your email address

If you say it like that it may make sense, however the email address that I often use (especially if you have to use exotic text entering device) is a@xxxxx.com.

End result: I'm banned to use the letter a in my password... how smart! It drives me really crazy.
The link is a preprint. Here is the published version: https://www.tandfonline.com/doi/full/10.1080/07474938.2013.8....
> It actually has less capability than FAT32 in some ways

I'm not sure I'd agree with that:

- "no attribute": S3 does actually have quite sophisticated ACLs and permissions that can be set at the object level

- "no way to say "create file but do not overwrite it": there are a few ways you can do that. Versioning, bucket policies, etc.

In fact I disagree with both yourself and the GP with your assumption that S3 is simple. If you want to do anything "enterprisey" with S3 then you absolutely do need to be aware of the maximum size of allowed objects (these days it's 5TB but it wasn't so long ago when it was only around 5GB). Then there's bandwidth costs (which means you need to also take into account VPC traffic and thus S3 endpoints) and ACLs (soooo many different places you can set permissions on objects - it's easy for someone untrained to get totally lost). There's different storage options in S3 too - depending on the frequency you want to request the data.

S3 is only superficially simple - but then the same can be said for any file system. If you just want somewhere to dump files then any fs will work. But when you start needing to performance tune and do all the other considerations that the GP highlighted with local server storage, then S3 quickly becomes as complicated as every other option out there.
They exist; I’ve hired a few myself who’ve chosen this path. But it’s just one of many approaches to get into security as a career, and there are many.

Along these lines, I highly recommend Rachel Tobac’s talk “The Path to Infosec is Not Always Linear”[1].

[1] https://www.youtube.com/watch?v=rWAeDVo8mXc
I'd have developers working in Dev VMs on their laptops, and sure I'd let them have root access to those.
Well personally I'd rather have all the music I'll ever need right here with basically a few taps on my phone for a very small cost every month instead of having to buy and download every album/song I want (would be extremely expensive in my case), back them up in the cloud, sync them with all my devices etc.

This comes from someone with a collection of roughly 1500 12" vinlys, meaning from someone who actually owns his music.
See the related HN discussion from earlier today about differentiable programming with Swift for TensorFlow and its corresponding changes to the Swift language: https://news.ycombinator.com/item?id=20890149
The advantage is that if you block all the cookies you can get a new identity by just resizing your window.
I would have never discovered 99% of the music I listen to if I didn't use Spotify.

There are pros/cons to both sides of this argument. Many artists would not have a music career if it weren't for platforms like Spotify (mainly Spotify). Spotify put their music in people's ears. Spotify made people fans and now those fans buy tickets and go to their shows, so these bands are able to tour.

There are pros/cons to both sides of this story.
And yet. Technical debt costs you time and money over time. Fixing code six months down the line takes 5-10x as much effort than just fixing it while it's still fresh. Worst case scenarios is where you end up throwing away an application and rebuild it because the technical debt has made progress grind to a halt.

If there's nobody left who understands the code, or if there's hero coders who 'own' one section of the application, it's a huge risk to the company - which can, and has, bring a whole company down (there's a few stories on the daily wtf iirc).

A recurring thought with me and my projects after about six months is always "I wish we had done this properly the first time around"; in hindsight there was more than enough time, and it's costing a lot more time to fix it now.
I find it amusing how perfectly they align with PinePhone[1] - first batch in September (with some drawbacks), final product Q2 2020, both blog posts released on Sept 5th.

[1]: https://www.pine64.org/2019/09/05/september-update-the-pinep...
> If the former is happening, it’s a sign it needs to be broken into multiple projects.

Breaking something in smaller projects also has its own associated costs.
Code reviews by senior people are massively helpful for junior devs. It's one of the perks of being in a good big company that very few startups can replicate.
So, I really wonder if the reason I am getting so many downvotes (I am only at 0 right now, but I have been as high as 3, so this comment has been pretty controversial so far) is because people are somehow failing to get my over-the-top / so-exaggerated-it-hurts sarcasm (which is a bit sad), or if people so truly agree with the premise that upstream developers are smart and users are dumb that they are angry at my strong characterization of it as categorically evil (which is downright terrifying).
There are many excellent apps on Android for Hacker News. However, a lot of them don't follow Material design, haven't been updated recently or simply don't have all the features available on the web.

I built this app to make a fast, full featured, yet lightweight native client. Please try it out and let me know what you think.
This is what regulatory capture looks like, and Ralph Nader's goddaughter paid with her life for the cozy relationship between the FAA and Boeing. That's what Boeing's corrupting political money bought: death and failure.
Dogs Review IN-N-Out Secret Menu Flying Dutchman
If you run in your container as a non-root user, it makes working with volumes a pain. Who knows what the container user UID will map to on the host and whether this host user, if any, will have permissions to access files in the volume.

Otherwise you can hard code a UID when creating the user in the Dockerfile but that means your containers aren't generally portable.

In the end, the path of least resistance is to run as root within the container and simply accept the security implications if using volumes.
Most teams at Google have senior devs that ensure this. The average level is way higher than other companies.