skysight-inc/HackerNews huggingface dataset:
Containers (and virtualisation) are helpful but. not bulletproof. If your threat model is already malicious code with ill intent, you probably want higher grades of privsep / sandboxing.

E.g.,

https://www.twistlock.com/labs-blog/escaping-docker-containe...

https://www.exploit-db.com/exploits/46978

Full virtualisation does far better, though I believe there've been exploits there as well. Yes, from 2015:

https://threatpost.com/xen-patches-7-year-old-vm-escape-hype...
I have heard that it is common for a drug dealer to put drugs on a victim, and tell the officials. The officials then let the 'real' carrier through.
>Losing even a small proportion of contributors

Wikipedia has been slowly losing editors for ~12 years[0].

[0]: https://commons.wikimedia.org/wiki/File:Active_editors_on_En...
I'd argue the problem is endemic to large stationary organizations, but some do a better job than others at keeping it at bay.

It's interesting to wonder why. I think one aspect is the degree to which politically powerful are willing to fight it. Famously Stalin actually cared that the Moscow metro worked well, and it did, in a country otherwise crippled by complacent behemoths.

Perhaps the Parisian elite likewise take more pride in having a metro which works OK, are willing to spend more political capital fighting for it. They feel some obligation to keep up with Brussels & Berlin, perhaps that substitutes for competition?
In our case, size is a property in the ontology.

For some players (second hand for example) size is the number one "personalization" requirement. Imagine you see a feed of products, and none of it is your size...
To me that’s a small argument not worth stating, because there are already so many accepted mechanisms by which to diffuse causal responsibility, such as in a corporation. And nobody is going to buy that toxic dumping is morally okay just because it’s causally diffuse, opaque, or cosmic somehow.

Very few people think in terms of moral causality. Many people do not assume that people with mental illnesses deserve harsh treatment, as opposed to kindness, even though it is in a sense the cosmos which has done this. People already frame the cosmos as cold and cruel, and people seek to bring a little warmth to that story. The fact that the cosmos did it makes no difference when a greater moral vision is in sight.

Another way of restating the cosmic argument is "it's not my fault".
One the whole capitalism is not zero-sum, as we can observe by continued GDP growth. I think a lot of the frustration comes from the feeling that within certain classes, it is zero-sum.

Imagine an economy that grows by $1 trillion. Suppose all that wealth goes to a select group (Top 5%). Everyone in the other 95% is essentially in a zero-sum game. If the paths to that Top 5% diminish (low capital gains tax, increasing education/housing costs), it becomes worse.

At the same time, the rich are running for political office and supporting things like Citizens United that re-enforce their power.
I suspect you may be an outlier, as most people seem to deeply resent the strong incentives to change how they author web pages. Shaping them slightly differently strikes me as unlikely to generate a dramatically different reaction.
Asking the real questions.

> That being said... why did you (or if anyone else can chip in) decide to chase funding when you didn't have a business model?

Biggest mistake IMHO. But is quite common these days. Everybody is chasing the unicorn dream.
As someone else pointed out, AWS does consistently upstream things to OpenJDK and is in fact regularly one of the largest contributors.

Additionally, the entire thing, again, is open source and with a permissive license meaning nothing is stopping anyone from forking it and doing what they'd wish with it.

You are in fact right that it was created to work well with AWS, but I fail to see how that is 'lock in', since most of those benefits are probably benefits on any modern cloud - since AWS does not generally run on a particularly unique architecture.
Funny, I just ordered a pocket notebook for the first time in years today. I'm curious to see what contingent of people on HN still use a physical notebook. I also use orgmode extensively to keep track of my intentions, media preferences, notes, and stray ideas, but it doesn't really scratch the same itch as a physical notebook.

The reason I had to order a physical notebook online is because I wanted a pocket notebook with no lines, dots, or grids on the pages, which is surprisingly hard to find. I'm attracted to the non-linear approach to notebooking, and plan to fill this one with content in a random page-order as things strike me. Sometimes I just have a cool thought or sentence, or just want to slowly fill a page with something, and it can really help your creativity solidify to have a trailing log of your weird random inspirations. Sometimes I just transcribe lines from a song or book I like, or write down something someone said. Some pages are just geometric shapes. Rarely, I'll make a simple "today this happened and this is how I felt about it" page. By the time you fill it up you have a really organic document that can help you understand what makes you unique and what you like / care about in your daily life, without the stress of writing a cohesive or linear work.
Yeah, and I was thinking about it this morning the reliance of FF-FD for surrogate pairs would shred punch cards (too many holes) and probably be a big reason for IBM to dismiss it when they were hugely punch card dependent and hadn't made advances like the smaller square hole punches that could pack holes more densely and with better surrounding integrity.

"Sigh, another swiss cheese card jammed the reader from all these emojis."
Go has a brilliant ecosystem, even if it has slight problems still (package vendoring, etc).

The language may be lacking here and there, but the tooling around it is good, and the runtime of it is great (sub-ms garbage collection, etc).
Not the OP, but:
https://plaintextaccounting.org/#data-importconversion,
https://hledger.org/about-real-world-setup-docs.html,
#plaintextaccounting and the project IRC channels
may have something helpful.
Thanks grandma.
This leaves mostly Druva and Code42 as mainstream endpoint data protection options.

I guess with the likes of box onedrive and google drive the market may shift in the coming years...
Object Relationship Detection in Pytorch
Cool idea but, from watching the demo videos:

(a) That's a messy, unappealing closet.

(b) The Alexa interaction felt awkward. Probably a touch interface would've worked better.

(c) Ugh, (used?) boots on the TV stand.

(d) Many of the clothing items we own are Asian items without barcodes. Wonder how the import would work on those.

(e) The website (chicisimo) could use a lot, and I mean a lot of copywriting love. So many walls of text. Some fashion photos should be front and center. It is hard to understand what is going on in the animated iOS screen.
The reason is simple. The establishment has nothing to gain but everything to lose.

Let's say the maximum reach/exposure to voters is 100% in their country. The political establishment of many decades already have this number close to 100%, but the opposition may only have 5%. You see, the opposition has potential to gain a lot from ads, but not the establishment.

Also in a rich society like Singapore, grassroots can make huge contribution to the opposition party if their voice get heard and spread. But the establishment does not need this.
Are you referring to the Steele dossier as "garbage 'research'"? If so, I don't quite understand your concept of garbage, given that much of it was proven correct. And I'd point out that the FBI says the dossier wasn't used for the FISA warrant.

Cue the deep state conspiracy theories, I suppose....
I think a lot of the time the idea of funding is:

From the startup's side: We don't actually know the business yet, so we need resources to fund our runway while we figure it out (ie. interact with the market enough to make smart pivots toward profitability).

The the funder's side: We basically don't give a shit what the business turns out to be, we want to fund talented teams that we believe can pull off profitability.
Just standard rule set at the moment. Hopefully can expand on this in the future!
And business calculations at many companies were automated or semi-automated by tabulating machines before those were finally replaced by fully programmable computers. The IBM 1401 released in 1959 was designed to make inroads into that market as a drop-in substitute or upgrade. Earlier computers would probably not have been financially viable in many of those roles: https://www.youtube.com/watch?v=ZPpV8X91neQ
> The real question is who invested, and why?

This always baffles me the most. Who gives money to a startup without a business model? I guess they just have funds to throw at the wall and hope something sticks.
Related, I wonder when it will become economical to build scanners in orbit around earth (or on the moon) as radiation from the sun does contain EUV components but the terrestial athmosphere is opaque to them so we receive none on the ground (your dermatologist is pretty happy about that). It might actually be one of the first things a space colony could make money with.
Most websites I've personally encountered that use AMP don't actually deliver a usable amount of content/features on the AMP version of the page, and so it usually ends up in an awful user experience where I then have to get the real version of the page before I can do anything.
Yeh I meant Blazor is also another option if going with .net platform
Do you have a source for that claim about rats? Interesting if true.
> One of the common security advice banks used to give is "check your browser address that you are in our server"

" in our server" is a simplification of the technical explanation: "signed by our computers using our private keys before delivery to you". That is still maintained in the case of signed content exchange, but instead the transport function is provided by a different server.

It's not much different than, i.e. signing a compiled app with your private keys before uploading it to an app store. Such apps also use hosts to identify themselves and their content, even though they are delivered via app-store mechanisms.
Some shops are still not Java 10, but Lombok helps you use `var` even there.
I use AntennaPod and can directly search for podcasts there from several sources. I had to search for "The Program audio series" to find it, just searching for "The Program" brought too much noise.
Introduction into Decomposition Methods of Linear Equation Systems in C++
What do you mean by coordinate transformation? MLE is invariant under parameter transformations because it's just the argmax of the likelihood.
Electric eel powers Tennessee aquarium’s Christmas tree
If you took time to read the summary in that README, you'd get all the citations you could want.

In the face of all the horrific reports coming from those jail cells, tell me how actively supporting ICE is not. Hell, name even one government facility where numerous children have died because of neglect and abuse at the hands of government officials.

And again, I can guarantee that illegal immigration will not stop because of ICE's shock tactics. It's just another hoop to jump through. Some of these people escaped the clutches of cartels, for chrissake. You underestimate the resolve of people who find no hope in their current situations.

I said in another comment the way to stop illegal immigration is via jailing business owners that hire illegal immigrants. This is just the war on drugs all over again. You're jailing the users, not the pushers.

All ICE does is enable actual racists and bigots (https://www.nytimes.com/2019/07/15/us/politics/border-patrol...) to enact their fantasies of making immigrants lives a living hell.
To use debit card, all you have to do is to know how roughly how much money you have. You have to know this even if you have a credit card, otherwise you risk not being afford to pay it off.

The danger with having a credit card is that you have an option to not pay it off. With debit cards, it's impossible. You can overdraft a little if you're tricky, but that's about it - whereas with a credit card you can end up going negative and finding it difficult to get back to black (whether because of your own faults or external circumstances).

I compared a credit card to straight razor because both are useful and safe in skilled hands, but create danger of hurting yourself if you're unskilled - a danger that doesn't exist with safety razors / debit cards.
Almost no software supports Grant charts like MacProject did years ago. I’d love to see something like that again. Note that I’m not talking about PERT charts, but Gantt charts.
The Big List of Video Game Randomizers
Am I the only one who sees the elephant in the room? 15-30 is the prime time when women make relationships and men make money. Software engineering needs full time commitmentent and no personal life is a part of the deal. Someone who learns programming only in college will be mediocre at best and FANG doesn't want to hire mediocricy. so women have a choice: go into programming and forget about personal life, because the money they earn by 35 won't help them, or choose personal life and have no time for programming.
What's the alternative? You sell software to entities who you like, and not to the ones you don't?

I'm the ISP on your area, and whoops- I won't let my internet be used by LGBT activists. I'm Tesla and won't sell cars to people who get Coal powered electricity. I'm Google and I won't let Republicans search on my site. I'm the electric company and won't let my power be used for abortion clinics. I'm Microsoft and I won't tell software to Gay people. I'm Apple not selling their phones to people who hunt.

I assume you would support those above scenarios? There are two options. Be a-political in your business dealings, or be political. There is no middle ground.

I don't know about you, but I'd rather live in a world where companies act a-politically then ones that don't.
I don't trust Apple refurbishers and recyclers to not sell their services to third parties. We know they were already doing this for firmware unlocks.
Ask HN: What are the Companies using .NET stack in Bay area?
I am trying to find companies using .net stack in their development i.e. Tesla
> First, Thomas Paine made the point that it was better to live under a dictator than a complex system that hurt you.

Interesting; can you point to the quote/source on that? (I'm also reminded of the Jobs quote: "Conspiracy is optimistic! You can shoot the bastards!")

I'm not sure one is "better", per se, but problems with complex distributed systems tend to be painfully intractable. Worse, I think human nature is to map such problems to narrowly-scoped villain narratives which feel tractable; and so not only does the root complexity go unaddressed, but great efforts are undertaken to thwart the alleged villains, sometimes making the real problems worse.
That argument doesn't address complexity. Tests are part of the system.
The problem is there are only a few different solutions:

1. Release parents and children into the US regardless of legal status.

2. Keep children in jail with their parents.

3. Separate children by sending them back to their country.

4. Separate children by placing them somewhere in the US (either with family or social services).

5. Send the entire family back to their country they came from.

Keeping innocent kids in jail is not right. Separating kids is not right. Having open borders is not practical. Sending back people to their own country is not right.

There is no solution. Many people who make the same argument as you would say just let them into the US but it is not practical when you have a welfare system. Many who criticize the current system even Bernie Sanders [0] says you can't have open borders since it would cause too much strain with our welfare system.

So what is the solution?

[0] https://www.politico.com/story/2019/04/08/bernie-sanders-ope...
Riot Games offers female employees $10M in settlement
The last time an article on HN about Amazon's warehouses being dangerous came out, a number of folks tried to argue that it's no big deal because they weren't dying. Thus, it's a safe place to work. High accident rates are perfectly fine as long as they dont die...
> so you may not miss much unless someone’s DNS resolver had a poor caching strategy

Microsoft Exchange used to (hope it doesn't still?) cache MX records until the service restarted. :( There's a long tail of braindead software in the DNS space
The impetus is not on the listener to "read through" the deception, the impetus is on the speaker to not purposefully deceive.

Whether you deceive by purposefully implying a falsehood or by purposefully denoting a falsehood it is still a lie.

Seriously, how far are you willing to go in your attempts to justify lying? You are basically saying "If I define my lie this way, it isn't a lie"

It's far easier and better for all involved if you simply tell the truth.
I'm wondering how feasible it'd be to vary PC through the day.

The pricing examples include using PC on a limited duty cycle, and billing is defined to start from the moment it's enabled (rather than from when it's ready), so it'd be reasonable to expect there's some level of certainty that the concurrency level is ready within a defined timeframe. What might that timeframe be, and to what level of certainty?
I dont want to nitpick, but some of his most influential work - dubbed the "annus mirabilis" papers / "amazing year" [0] - was done while he was an assistant examiner at the patent office in Bern. Definitely not a position he was aiming for, but still, a highly productive time.

- [0]: https://en.wikipedia.org/wiki/Annus_Mirabilis_papers
Yes... not sure how I missed that one
I assume that’s what most IoT devices ultimately are.
Those arguments for acquiring patents are as weak as the patents themselves. I'll admit that I only skimmed and read parts of them but nothing seems patentable or particularly innovative to me. It just looks like standard software engineering.

> as a startup we need to create value and this method has proven successful in the past

This means nothing to me. You did something I'm not a fan of in the past (patenting software) so that makes it okay to do now?

> we’ve never thought of using patents against others

It doesn't matter that you've never "thought of using patents against others". Things change. And the way that business is going it seems inevitable that these patents are going to end up in the hands of patent trolls. Patent trolls don't usually come up with their own patents. They buy companies that aren't doing well just for the patents.

> And now, our number one driver for building IP: companies sometimes need leverage to negotiate or deal with the big tech players

I don't understand this one at all. What negotiations are you having where patents help?
You're not going to cut your lines of code by an order of magnitude by switching from Java or C# to JavaScript or Python, but I would say you do get an order of magnitude increase in ease of managing large code bases with the popular statically typed languages.

I'd rather have 1M lines of Java than 100k lines of JavaScript, and if essential complexity took 1M lines of Java to flesh out, you aren't reaching parity with 100k lines of JS.
It's staggering how little the average person on the street cares about these issues. My friend is a software dev and when I asked him why he got a Ring knowing full well how intrusive the system could be, he shrugged and said "Well, can't be worse than my Alexa"
"Illegal" is a well defined term. Punishment or lackthereof are irrelevant.
An event venue near me does a genius thing with the bathrooms.

The restrooms have single line of stalls. There's a moveable wall between the stalls to change the allocation of how many men's stalls there are versus women's. That makes it so if you're running an event that tends to attract more people of one gender than the other, you can create more toilets for that gender. Quilting expo? More women's stalls. PC gaming event? More men's.
I disagree. while ICE has been a thing throughout numerous administrations, their conduct has explicitly become more degenerate and reprehensible during this prior two administrations. While they may not be the PRC, they certainly share several predilections, specifically a lack of any real oversight.

- The Intercept published a report by the DHS Office of Inspector General revealing that 1,224 sexual abuse complaints while in immigration custody were filed between January 2010 and June 2017.

-As part of the 2018 Trump administration's zero tolerance policy, nearly 3,000 minors were separated from their parents, or the adults accompanying them

- From 2012 to early 2018, ICE wrongfully arrested and detained 1,488 U.S. citizens, including many who spent months or years in immigration detention.

https://en.wikipedia.org/wiki/U.S._Immigration_and_Customs_E...

As for protests "doing something" they absolutely do in this case,as github is only valuable for Microsoft so long as they acquire and grow a base of developers to use it. The brand already excludes several foreign nations, likely as part of a policy by Redmond to court the present administration. Their failure to maintain an ICE contract without an exodus of developers would slowly turn their newly acquired developer website into a 21st century hotmail.

Github isnt the only player in this field, no matter how badly theyd like developers to think this. Gogs, Gitea, and gitlab especially are all equally suited to quickly and effectively fill any gap Github might present. Most have auto-migration features to quickly ferry code away from Github.
That was my experience of SELinux.
Not the thieves themselves but buyers.

Used to be very common for someone to buy an iPhone on eBay, realise it was activation locked and then see comments everywhere on how to remove it.

My guess is many of those people would end up just throwing the phone away.
>It's about time white collar crimes are taken as seriously as other crimes. If you break into someone's home and steal $10,000, no one bats an eye over imprisonment. But if you steal $100,000 from taxpayers, you suddenly become a lot more sympathetic.

Breaking into a home is a violent crime whereas white collar crime is nonviolent. You can often return property, you cannot make someone un-experience a burglary. Don't get me wrong (i.e. "I know that if I don't include this disclaimer someone will try to) white collar crime and corruption like this should certainly be prosecuted but there's a reason we generally don't punish it as severely as violent crime since we generally consider property less valuable than life and health.
Signed HTTP Exchanges Considered Harmful
The breach is here: https://hackerone.com/reports/745324

TL;DR:
One user reported a bug to sign-in using cURL.
HackerOne replied with admin credentials (session) to show that login works.

Nobody noticed.
One guy logged in, downloaded a significant amount of sensitive data (private exploits!) and then told HackerOne.
They give 20'000 USD to say nothing about it.

End of story.
The other person trained a rat, this one is a mouse. I doubt it’s fake.
Interestingly, I ran some very rough sentiment analysis of the comments here and it turns out that Apple gets people the most worked up, followed closely by Facebook. Of Apple, Google, Microsoft, Amazon, and Facebook, posts about Microsoft did seem to have the most positive comments.
I find that it is more relevant for people to learn how to play with people that are worse than them. Not everything needs to be a competition and the goal is't inherently to get good at things that are for fun.