skysight-inc/HackerNews huggingface dataset:
> es, this is fair -- but OpenBSD tends to fit more in the gateway/firewall/proxy/bastion space than running your microservices (although I've run plenty of node/etc apps on obsd hosts, IAAS and ansible is still a valid deployment path even after docker exists..)

I don't think that's the point. Nowadays, when somebody at works hits a bug and that ends up on my desk, I just tell them to setup a Docker container that reproduces the bug.

99% of the time the answer is, "oh, I had something misconfigured in my system, my fault". And I can close the bug without doing any actual work.

I can also develop on my laptop, desktop, etc. if all my environment is inside a docker container, without worrying that my workstation gets updated, some version of some library changes, and now I end up having multiple slightly different developer environments depending on the machine I use.

---

For me, the #1 reason not to use OpenBSD is lack of a good filesystem, and #2 lack of good drivers for modern hardware (e.g. I can't use a GPGPU from OpenBSD, or an Apple TV to stream my screen to do a presentation). Beyond that, lack of #3 docker prevents me from using it as a developing environment, and #4 lack of good cross-compilation toolchains from Linux to OpenBSD prevents me from trying to ship things from my development environment to OpenBSD systems.
Expecting to have the same rights as if using your own devices when using someone else’s device that they are paying you to perform work on qualifies as an indignity to me.

Do people in EU countries expect to use any other of their employer’s equipment for personal reasons?
No. I haven't deleted or edited the proof. It is still on my Reddit profile.
What do you mean by Apple's grip on Swift?
By looking at the source code i'm pretty sure it ended up on HN front page purely by accident. The author clearly is just working on some proof of concept and hacking stuff together.

(i do agree _ and public together don't make any kind of sense though)
I remember dmoz! Nowadays any curated list would need to have the properties of (a) being publicly editable and (b) being prose, because for the time being it's sufficiently difficult for machines to write prose. Or at least, I assume so, since everything popular except wikipedia has been gamed.
Well it would be `sudo apt-get install X` and the password is my password. In Windows how do I write a file to C:\ without logging into the administrator account? I didn't know, my friend didn't know, what's happened?
I get you are joking, but there are two points that I would like to raise:

There are many, many SV companies with large offices in parts of the world with very strong workers rights. I work in one of these. There is no problem, other then I'm not expected to work weekends and be on-call at unreasonable hours. If this is required I would need to be compensated for it.

Secondly; perhaps I am reading into this, but I get the sense you are implying that "less work" will be done due to these protections. You may be surprised to find out that German factories are actually quite efficient ;) , and that treating workers well gets them to work more, not less. Having a healthcare system that means you can bring your children to A&E at the weekend and not get caught for $1000s means you can come to work on Monday with a clear head.

Having protection from "right to work" means you can voice an opposing opinion without fear.

Having a paid holiday means you can come back to work refreshed with a clear mind, and not "burn out" as fast.

Having maternity, and paternity leave, means happier parents (like, in a abstract way, not like in a oh I haven't slept in 8 months I'm soooo happy way). Let's call it out here. Giving children a good start in life sets them up for success.

On a global team you can quite clearly see the results of the different work environments, and the various impacts each environment has. From a tech point of view, I see this most critically in the ability to voice controversial opinions, or push back against your manager for example.
unfortunately set/swapcontext and friends require a system call to change the signal mask. So in practice they are a few orders of magnitude slower than setjump or similar.
but, there is no harm in getting an extra b12 dose for meat consumers as well! plant-based milks are not meant only for plant-eaters (to put it simply) they are of course meant for everyone
It's a long way to commute!
In my experience you can share your views in Google as long as everyone around you shares those views.
To be honest, I'm glad Google and others like them are there for the crazies. My experiences working with ex-Googlers was not positive. Bordering on hysterical, cringe beyond belief (sending site-wide emails starting with "If you're reading this you're probably a white, straight, man... blah blah" etc.), more interested in their own activism than work or actually getting along with other people.
> To exploit these vulnerabilities, you already need (unprivileged, sandboxed) RCE.

Such as running JavaScript code served by an ad network.
That's .. the unsolved research question under discussion? As to whether there is a score at all, where it is kept, and how it might be affected? And while is seems there is some evidence, we're still in the middle of the replication crisis?
The cynic in me thinks a good capitalist would try to sell the discovery to the highest bidder. In this case, it would probably be Intel, to "catch and kill" widespread knowledge of the exploit. Another high bidder would be an investor in position to exploit a short-term massive short on Intel stock. I imagine the payoff would be in the millions of dollars in both cases, and I doubt either scenario is even illegal.
I would assume so. But is it actually?

(The ancient Xperia I had did report with a different USB ID and device class when in charge-only mode, but it did obviously communicate over data, at least as far as enumerating its endpoints.)
But the tools are improving quickly! Because of Dave and the general community. It's really great to watch (and use!).
I don’t think people are considering enough that the people who raised the concerns could simply be wrong.

Note that Google didn’t need an extension to know which employees were tracking other employee’s calendars.
what they meant is they fixed the bug that made people notice
I noticed that the FB app is very dodgy. Now, I use a shortcut to FB in the web browser to check on things on my android.
> Another thing that I just learned it is actually still illegal to borrow a gun at a shooting range if you have a non-immigrant visa (unless you have a hunting license).

Huh; do you have a citation for this? I used to bring scientists from other countries to the shooting range for the cultural experience, and almost brought a pal from Europe hunting a year or two ago (on my license). Never realized I might have been putting them in legal jeopardy.
> Meaning that it would have been faster to tear the entire building down and rebuild it from scratch than it is taking to remedy the issues?

This sentence is never true.

It's not true in software it's even less so in construction.

The issues would have been there even if the construction was done perfectly, you always fix such massive infrastructure for their whole lifetime (it's not simply a building!)

This time they fucked up and the airport didn't pass the safety checks necessary to open it, but there is constant fixing and changing and upgrading and scaling in an airport facility.

Tearing down it and rebuilding it it's never an option and never a good idea, unless the structure is severely damaged or contaminated (e.g. asbestos)
It's more about American governance than anything else.
Looking at the videos, it looks like the camera opens when the main view is swiped to the right. And you can see a ~300ms delay between when he swipes down and when the camera starts. This makes sense, because the way you open the story feature on FB is to swipe right. It's a good UX feature to start booting the camera as soon as you initiate the gesture, rather than when you've fully navigated so the camera is ready when you've finished your swipe.

Their layering system also pushes the view slightly to the right to create a perspective effect when it transitions back to the app from viewing an image.

Of course, this triggers the component that thinks the app is starting to pan to the right - and starts the camera and renders to the view behind the main view.

This seems totally plausible to be a bug - and I'm not sure why other commenters on HN aren't bringing this up.

Their app is fairly complicated, and it's totally reasonable that the team that worked on the story feature assumed that the only thing that would cause the view to move right was a user gesture. However, it looks like their layering system also caused it to move right as part of a perspective transition. This sounds like a bug to me.

If you really wanted to keep the camera open in the background, there are other ways to do so, such as literally not rendering the image to a visible framebuffer upon initiating the AVCaptureSession. iOS does not require you to attach a AVCaptureVideoPreviewLayer to the capture session - and you could very easily just take those frames and process them without ever showing a preview to the user.

The bug is not that they were capturing in the background, but that the perspective transform of the main view caused the view behind it (for the story camera feature) to think the user was swiping the main view to the right and to start up the camera to make sure it's ready asap. Running the camera in the background is actually pretty expensive - you don't want to suck power doing so. As much as facebook wants your data, it also wants you to regularly interact with the app. If users think the app is draining battery too fast - they'll use it less throughout the day to preserve battery life. Making sure it isn't a power suck is important to their core business.
Apple has de-facto control of where the language is heading.
Since google's spying on you, you'd think they'd be able to link the page you're reading to the search that triggered it, and filter the analytics back to the search. But google won't use their spying to our benefit...
They can image my mobile device in, what, 5 minutes? Why hold it for days or weeks except as a form of coercion? You land and need your phone to retrieve the phone number for friends or family, to order rides, create and manage accommodations, and find directions. Taking someone's mobile device leaves them stranded.
I have been going back and forth on this heavily, but two weeks ago I reached out to ISC2 and ISACA’s ethics boards to begin exploring the process of terminating the certifications of several FB employees that potentially (let me emphasize 110% blameless until proven otherwise) have been in violation of the ethics code for both of those orgs.

I asked ISC2 in particular that if a certain employee was shown to be on XYZ team that handled XYZ task, if they had say ignored multiple outreaches from the community, and then also (this is key) not raised concerns internally to a reasonable degree that a single individual can in a megacorp...could their say CISSP be revoked. The answer I got was a strong yes in the hypothetical stories I proposed.

I also emphasized that I would be writing an apology to said employee, and offer to resign / terminate my CISSP/CCSP if wrong because we have to prevent this process from becoming a no-lose vindictive game.
Headline should be corrected: the site is near Berlin, but not in Berlin.

Reported site is Grünheide, some 40 km drive from Brandenburger Tor, and a bit shorter distance from the under-construction BER airport.

https://www.berlin.de/en/news/5972608-5559700-elon-musk-tesl...

What makes me curious is that this village is actually within a nature protection area, Naturschutzgebiet Löcknitztal. I could imagine that building such a symbol of international market economy there might attract anti-capitalist demonstrators and involve protesting and riots. But perhaps I'm wrong.

https://www.google.com/maps/place/Gr%C3%BCnheide,+Saksa/@52....

I also find it somewhat interesting that in the political composition of this village of 8000 residents, the Social Democrats and Linke (Left) have 3 seats, and two seats are held by CDU, AfD, and.... Freiwillige Feuerwehr.

Yes, the voluntary fire brigade is apparently popular enough to feature in local politics. I think this is a somewhat sympathetic phenomenon in German local politics.

https://de.wikipedia.org/wiki/Gr%C3%BCnheide_(Mark)
>They also traditionally get to pick and choose who can attend, which often means excluding costly students like any that have disabilities.

We both know that's not why you take issue with school choice because these kinds of issues can be easily adjusted through policy changes - but you're not proposing policy changes. You want to completely get rid of the entire thing.

And by the way, in the cases of kids with extreme behavioural issues, those kids are also routinely expelled from the public system schools. So again, what are you arguing?

>Let's apply "move fast and break things" to education. What could possibly go wrong?

Can you try and not distort arguments? Nobody except you argued this.
look at the discussion on swift forum when SwiftUI was announced. They added a huge batch of new features to the language with a huge proposal that got released with xcode eventhough it has never been discussed beforehand publicly (for obvious reasons).

Apple is clearly the main force behind Swift at the moment, which has some good sides (at least the language is evolving), but is pushing the tech toward a certain direction at the detriment of others (IMHO). Apple is mostly building frontend tech, and swift initial goal was to also be a great force for server-side tech (which means great cross-platform experience).

As an example, i don't think apple is ever going to release a server side framework, or a cross-platform GUI framework able to create android app. The only swift/android project i know on github (https://github.com/readdle/swift-android-toolchain) is using a swift fork to disable objective-c features that don't work well on other platform. That's telling.
it's just a fashionable rhetorical lever
The scale and complexity of the problems is appealing to some people. There are very few companies where you get to work on problems with the same scale problems as Google.
I think you're saying the same thing. A one-time 20% bump isn't worth that much these days to the vast majority of people. (Even if it is only 10 minutes... which I tend to think might be an underestimate, given the testing, etc. you'd have to do to make sure it's all stable. 10 minutes to an overclocked boot, fine. 10 minutes to an overclocked configuration that can run a workload without problems for eight hours a day for several years... that seems like more of a challenge).

.)
It’d guess it’s an implementation detail that’s been marked as public for ease of use during development.
> i don't think apple is ever going to release a server side framework

Maybe not, but there is this: https://github.com/apple/swift-nio
That's workaround - not solution.
All milk has sugar in it naturally (Lactose).

I don't think even in America they add sugar to it (I just chcked on walmart's website and none of their milk lists added sugar in the ingredients)
You seem to be unaware that Tesla already has a sizable presence in Europe, including a final assembly plant in the Netherlands. Some of the details are different, but I don't see employing a significant amount of Germans being novel for them.
Double Loaded Zip File Delivers Nanocore
What consequences do you mean?

I could imagine that the factory staff would often live closer to the site, in Brandenburg, not in Berlin which has housing problems and is accumulating more of them through rent regulation.
Some people care what they do with their lives.
I was thinking it would be running on its own core. Cores tend to be quite cheap these days.
More info on the patreon page: https://www.patreon.com/fpga_dave
I see; thanks for explaining that.
Honestly this is the reason why I only give apps temporary permissions through an android app called Bouncer. Prevention is better than cure.
The results for this particular HN post are:

Bad: 0.0598 - Good: 0.9307.
>Another example; most printers covertly embed an identifier in their prints.

To be picky only colour printers, at least officially (though there are theories about similar ID for B/W laser printers):

https://en.wikipedia.org/wiki/Machine_Identification_Code
If you aggregate the selfish interests of all voters, you get a better reflection of what society wants than if you average the selfish interests of 1000 people chosen at random.
Lingscars.com: The UK's favorite car leasing website
This is old.
well, I typed "Court: Suspicionless Searches of Travelers’ Phones and Laptops Unconstitutional"

Bad: 0.9969 - Good: 0.0032
homo sapiens is a political animal and you can't just pretend (or expect) that for 8 hours in day it isn't true. you couldn't expect that from slaves so why would you expect that from employees?
I don't know about New Zealand, but Iceland is part of the EU's single market when it comes to selling cars. I'd expect for a company like Tesla dealing with regulatory overhead in new markets might be the limiting factor.

New Zealand is an English speaking country so perhaps it's easier for them, and to sell cars in Iceland you don't need to do anything more than ship cars you're selling in the EU over and pay import tolls & registration fees.
Is this what the EFF, ACLU, etc. actually recommend these days? Or do they want regular Joe Citizen to be willing to subject themselves to duress by customs?

If most people erase their devices, it's a kind of giving up. Accepting data loss (hopefully temporarily, but not everything is stored in the cloud, e.g. SMS messages, at least in Android phones with the original texting app) is punative. And disproportionate. And resets are a PITA for non-technical people. As a work around to avoid being harassed, to me it proves we've lost the privacy fight.
Well if you look at the "cross-platform" support compared to the other languages such as Go and Rust, Swift is quite poor at this: Apart from Linux, platforms such as Windows, FreeBSD, WASM, Haiku, etc are all unofficial ports which community members have to maintain but it is getting there, slowly.

In terms of the prospect of a cross-platform GUI, SwiftUI is taking a similar direction to Flutter and React Native. I see no other serious alternatives from the likes of Go or Rust at the moment. As far as Apple is concerned, they have total control of the direction of the language and they pick and choose which components to open-source.
Better data collection for beekeepers and growers (upside podcast)
No, it's not mainly a software problem. As is common in big delays, there are multiple issues, but a fairly big contributor was political arrogance that wanted to brush away fire regulations. That didn't work.
The opaque return types are, however, only available in Swift 5.1 and later, which means that the API will have to be different and not directly compatible with the Swift UI.
quite a few strategy games, looking at you PDX, are so damn close just being excel/access with pretty graphics they end up as a slog instead of fun.

however we have to acknowledge there many types of players, from those who min max to those who just want to point and click
That should not happen on rolling release distros either - sounds like it would be a NixOS packaging issue where the version (or git commit hash) of Mesa/LLVM is missing or the Nix package applied patches without changing the version in the cache key.
Calories are meaningless https://www.1843magazine.com/features/death-of-the-calorie
This is getting complicated. OS process management, threads and lightweight pocesses, green field process control, virtual machines, containers, sandboxing in n browsers with m different technologies, now this WASM stuff..and orchestrating this all across the cloud and the global internet, ending in homes and corporate machine rooms.

Enverywhere you have to think: who can load/run a module/process and from where, how to authenticate and authorize, which API to give to it, etc...

A historical note:

Bell Labs Plan 9 had a universal OS level solution, that Linux has somewhat adopted, but could not make general enough, partly due to the higher lever ecosystem being stuck to old ways:

- per process name spaces with mountable/inheritable/stackable union directories and optionally sharebale memory (Linux light-weight process, LWP, comes close, it was also historically copied from Plan 9)

- Almosty all APIs (even "system calls") as synthetic file systems (Where do you think /proc came from?)

- which you could mount and access (efficiently) locally or through a secure unified network protocol (9P)

On Plan 9 you could just run different parts of the browser (JavaScript engine, WASM or anything) in a tailored limited LWP with limited mounts as synthetic file system APIs...

Note that Docker kind of retro-fits Plan 9 ideas in Linux kernel to embrace and extend the original ideas of Plan 9...
Yes, and then there's kitura and vapor which are trying to make it happen.

But look at what Lattner's concurrent manifesto aimed at two years ago : https://gist.github.com/lattner/31ed37682ef1576b16bca1432ea9...

We still don't have async / await, and that was just step 1.
and when you forcefully inseminate them over and over.
They can only image your device if they can connect to it. I don't know what Android is like in this regard, but an iPhone won't open up the USB interface to a foreign device until it has been unlocked and the device has been trusted by entering the passcode, which keeps some power in your hands.

If they just take the device off you, your power is taken away in a different way, but it's still taken away from you.
Recently I've been bouncing from hobby to hobby trying to free my creativity. I bought some nice pencils and a sketch pad and started drawing, I took out a unity learning subscription and started programming VR games, I bought a guitalele to practice guitar without hauling a full size guitar about. And I've been experimenting with live looping in FLStudio with my Akai Mini midi.

What's ruining me though is the amount of time I spend resting, drinking, smoking, or on Reddit. I'm trying to get a fun routine, or switch out the bad habits for good ones, setting myself evening goals.
Introducing a fresh new look for YouTube on desktop and tablets
It also happens that the circumstances that allowed a company to dominate come to an end. It would require heroic measures to move to a new form of dominance. Why should lightning strike again in the same place?
> a good capitalist would try to sell the discovery to the highest bidder.

Not all security researchers are doing it for the money, 0day markets always exist. Malicious people who wish to use the vulnerability for profit wouldn't disclose the vulnerability to begin with. So it's not a new problem.

> this case, it would probably be Intel, to "catch and kill" widespread knowledge of the exploit. Another high bidder would be an investor in position to exploit a short-term massive short

But your comment is insightful - Intel's case is unprecedented. Due to the huge impact of the vulnerabilities, the threat is not coming from the blackhat sellers or black market buyers, but Intel. Intel itself can simply pay researchers with an NDA to keep their mouths shut, while still doing nothing. The impact of the vulnerabilities is also high enough to move the stock market, allowing insider trading.
For those who don't know, their website https://vcstarterkit.com/ is pretty amusing as well.
One pretty annoying thing with WASM is that it is pretty hard to generate due to requiring a structured control flow so anyone generating it must implement relooper och stackifier. Is there any work on solving this issue?

http://troubles.md/posts/why-do-we-need-the-relooper-algorit...