skysight-inc/HackerNews huggingface dataset:
> There was 'interesting' research out of IBM a couple of years ago where they claimed they found that containers with good seccomp profiles etc were 'as secure as' a VM. Well, nobody goes around believing that.

You're leaving out a key detail of that research. They never said that tuning seccomp profiles to secure existing containerized apps is practical or effective. In fact, quite the opposite. IIRC, what they actually did is to create a hypervisor-like narrow interface on top of containers by restricting the available system calls to closely resemble KVM's hypercall interface. This design allowed the authors to reduce the size of the trusted computing base while avoiding overheads associated with VMs, though it would also limit the ability to run unmodified Linux binaries. Overall, I found it to be an interesting alternative to containers or VMs.
There comes a point where the model no longer accepts any progress beyond a +1.0C increase. No matter how many additional actions taken, the floor is +1.0C. It seems the immediate extinction of the human race would still result in an increase in temperature. Is there research that backs this up?
I was once told (and I've long since forgotten where I heard this) that the three most important aspects to include in any news story are (1) what do we know, (2) how do we know it, and (3) what do we not know. I'm not sure I've ever read any news story that has hit all of these.
I see your point. But we trade security for convenience 24/7/365. We could all have bulletproof glass in our homes, personal security cameras everywhere, backup generators, panic rooms, etc, but we don't, because it's not convenient (and I know the expense is primarily what makes it not convenient, but I think it's still a valid argument).

Providing access to Wikipedia over http to people in third world countries may be worth the risk of someone MITMing the site with propaganda.

The suggestion is only to give some users the option.
Or LXD/LXC which can run containers such that they are isolated from one another in terms of their id mappings.
The French constitution does not guarantee Freedom of Speech. That is a uniquely American thing.
It always seemed silly that people with just months to live weren't allowed to try new medications in case they were dangerous. Surely you should be able to try anything.

One protection though is that desperate people will pay for snake oil so maybe it must be free or cheap.
They also had an incentive to ignore or deprioritize stale or low impact stories. The bonuses required that the market impact be durable, and the stories still had to be edited to fit house style.
I reply separately to observe that the flow you describe is bugged in a more obvious way: if you ask only for an email address, and then discover the related account by normalizing that address before doing a database lookup, it's a serious error to then send the reset email (which controls an account you looked up using the normalized address) to the original address. You found the account by looking up a normalized address; the original address isn't even known to be associated with the account.

In that case, there are three options:

1. Send the reset email to the address you pulled from the database. (correct)

2. Send the reset email to the normalized attacker-provided address. (wrong but "probably fine"; this is the bug I was talking about in the first place)

3. Send the reset email to the original, non-normalized attacker-provided address. (wrong and definitely a problem)
It's a different 50 page section for every reader. That's why the book is so long in the first place.
You can't assume protection, whereas with http you assume no protection.

So, if you can't trust certificate (not when it is invalid), just show same level of protection as http.
For some perhaps-off-topic contrarianism, what do you make of Uncle Bob railing against database-oriented architectures? [0] (He takes a good few minutes to get his point across.)

[0] https://youtu.be/o_TH-Y78tt4?t=2566
...which is another way of saying they lack the surplus capital to speculate on starting a company.
Concerning creating directories:

out/foo:
> mkdir -p $(@D)
> …

I prefer to use this pattern, which lets you have many fewer `mkdir -p …` lines in the make output when you use it a bunch of times:

out/foo: | out
> …

out:
> mkdir "$@"

(Here using the > recipe prefix from the article, though you won’t find me doing that in real life—I like my tabs.)
> The solution was to configure my .editorconfig file to use tabs for makefiles

The real solution is to not have your editor silently convert tabs to spaces, ever.
What an incredible little story - I didn't know this and I'm from Lowell, Mass., Kerouac's hometown. The imprint he left here is palpable - Lowell is now considered a culture/arts/music destination and there's even a park dedicated to Kerouac with granite pillars with his writing etched on them.

Always good to see him mentioned on HN. (My username is the protagonist from one of his other works, The Dharma Bums.)
I liked Make due to my perceived simplicity of it. Thanks to this article, I think I'll just use Rake next time.
Fast charging is not a friend of electric car batteries
Manna by Marshall Brain (No Longer a Sci-Fi Story from 10 Years Ago)
Definitely fair points. I do feel like I'm swimming upstream even when I'm using the built in Result class in Kotlin.

Truth is, I rather be writing Rust, but I need the JVM sometimes. ;)
My take on making directories: https://www.cmcrossroads.com/article/making-directories-gnu-...
Why? Didn't Fox News set a precedent when they won that lawsuit and courts agreed they had the right to lie in the news?

Edit:
Oh, because it's no the US.
Other than The Simpsons allusion, can you be more specific in how James Joyce’s “Ulysses” is “trash”? Quotes from the novel with your criticism are welcomed. I’m interested in knowing how you came to this conclusion. No need to be sorry. Thank you for the observation.
Also having very little effect.
I'm not familiar with French law. Can you point to us where it explicitly grants freedom of speech?
Consider then https://en.wikipedia.org/wiki/Arimaa - playable on a standard chess board, but has a combination all explosion of movers larger than go. https://en.wikipedia.org/wiki/Game_complexity
> MAKEFLAGS += --no-builtin-rules

> This disables the bewildering array of built in rules ...

Oh, wow, I totally disagree. It's good to be opinionated -- that is, unless you're wrong. ;)

In all seriousness I find it terribly useful to quickly create simple Makefiles and follow idioms like CFLAGS/CXXFLAGS/LDFLAGS/LDLIBS/etc.
Seems like this would further accelerate the trend of news outlets being vanity or ideological projects for the most wealthy. Fewer outlets, less local news coverage, less competition in markets. It's not like they're raking in cash as is.
But leaving those men on the street in also expensive for society. I understand this is how it works for any individual shelter, but for the city as a whole, they're going to be paying for this one way or another, whether they provide shelters, let them sleep on the bus (a great place for people with violence/drug issues) or just abandon them to the streets to let them figure it out on their own. I think providing shelters, and maybe guidance with their problems, is still going to be the best option for the city. As long as they can look at the entire context, and not just a single shelter.
They show big red error and prompt to continue is hidden under spoiler. Also XHR requests just cut off, it's painful when developing and testing.
I’d never heard of Hungarian notation, but searching for info I realize that I’ve seen this pattern so often but never knew it had a name :) TIL https://en.m.wikipedia.org/wiki/Hungarian_notation
>Finally, many platforms - particularly Facebook Messenger and Hangouts use centralized services to request the preview layout. This is in contrast to WhatsApp* and iMessage where you will see one request per user.

Wait, does this mean you can get the IP of most people you can contact on whatsapp by just sending them a link and waiting for their phone to check that link?

I can think of plenty of ways this could be abused!
Yes, this is what is being done today.

My point was that HTTPS is (much) more complicated than bare HTTP and this is probably one of the reasons it is not taking over the web in a storm (though progress is undoubtedly there)
We're already well into the anthropocene: https://www.climate.gov/news-features/understanding-climate/...
How automated though? I have an automated script that is really easy for me to run, but I'm not sure others would easily pick up the pieces if I was fired out of the blue...its automated but not simple.
All Your Questions About the Watchmen Finale, Answered in Spoiler-Filled Detail
The price of helium will rise as the supply is used up. Does helium/natural gas mining simply cost too much to make up for any reasonable change in price?
There's no need for public hospitals in China to publish financials, so getting verified information on the profit generated from TCM is unlikely. However, if you're willing to trust Statista [1], TCM sales in China have been growing quickly. Considering that public hospitals in China usually offer both Western and TCM treatments, they're probably also capturing some of that growth.

[1] https://www.statista.com/statistics/988866/china-traditional...
Serviceable does not imply profitable (though profitable implies serviceable).

As much as I love lugging around rotary tables and indexing heads a machine shop that makes triple digit part quantities would be stupid to run old machines (too many man hours per part) and a repair machine shop would be stupid to finance a new 5-axis.

Equipment in most industries moves from low margin, high duty cycle operators to operators with either higher margins and/or lower duty cycles.
> I'm arguing that they haven't made a more entertaining version, they're confusing novelty with entertainment

Is your position that disallowing castling does not lead to less king safety and thus less draws, more mating attacks, piece sacs and complex tactical games? Or is it that you think these things do not contribute to more entertaining games?
AH! So many books to read.. I always get excited when I see these type of threads (because I can get new worthy books to add to my list), but on the other hand I get depressed that it is pretty damn hard to catch up with everything that I want to read.

My list would be too long to post, but these are the ones next in line:
- Meditations
- Digital Minimalism
- I Ching
- Art of War
- Tao Te King
- Steppenwolf
- Think and grow rich

In general want to focus on books of: business, leadership, self development, productivity and spiritualism (mostly buddhism).
I sat in on a Honeycomb incident review and you won't believe what we learned
Found it in chapter 3 of book 3 in Aulus Gellius:

https://www.thelatinlibrary.com/gellius/gellius3.shtml#3
Trusting the contributors of django-money
I know this is b2b, but I would love to stick this thing on every single item in my house and track them digitally. Any thoughts on whether that'd be possible, in terms of cost and the tracking algorithm?

Edit: in case it's not obvious, I spend so much time looking for things around the house that I'm willing to pay a significant amount of money to solve this problem. You mentioned the target cost is less than $1. If I have 1000 items that's $1000. Even if that's cost per year, it's not completely out of the question.
I'm a little confused by something. I wouldn't have expected his/her example code to compile:

fun divide(dividend: Int, divisor: Int): Try<Int, String> =
when (divisor) {
0 -> Try.Err("Cannot divide by zero!")
else -> Try.Ok(dividend / divisor)
}

The first branch of `when` is of type `Try<Nothing, String>`, the second branch is `Try<Int, Nothing>`, and the return value is supposed to be `Try<Int, String>`. None of those line up...

How is that possible? Does the compiler do some magic for the `Nothing` type? The definition looks pretty damn simple:

public class Nothing private constructor()
No. It is still the WhatsApp server making the request to your website - so you only see the server's IP.

Facebook makes one request and then caches the result. Other servers may not store the result.
Intermittent fasting. Vegan diet. Cycling 100 miles/week.

And yes, meditation. Meditation is key. You've got to take hold of yourself (your mind).
So force GNU make and bash as shell?

No thanks.
Companies were giving away “free” $400 computers in exchange for signing up for dialup for two years back in 1999. I’m surprised that streaming service providers aren’t doing the same.

I did get two “free” $179 AppleTV 4Ks for signing up for, DirecTVNOW for 3 months (signed up twice in the course of a year). A 40 inch TCl Roku tv is the same price.
Because I tried to access the page a few times over a two-hour period, and it always timed out.
The problem is that a http: protocol specifier implies no protection; the moment you follow the link, you know that the connection is not secured. Whereas a self-signed https: connection could be due to someone MITM'ing a site that generally uses CA's, in which case "no warning message" implies that the site is secured. The browser message has to make it clear to the user that something possibly unexpected is going on.
An innovator in Ghana is turning waste plastic into liquid fuel
Gleam – A Statically Typed Functional Programming Language for the Erlang VM
That looks to be a good article, explaining the reasoning behind the different alternatives. What I wrote matches your Solution 4—that pipe is indeed a subtle beast! I’ve definitely combined this with fancier patterns and second expansion as well.
I did not say only Americans do this. Nonetheless, I am not convinced the homeless issue in France competes with that of LA, Dickens wrote in the 19th century, and this is the 21st.

Which nation has military bases in every populated corner of the Earth? Soothing platitudes such as yours have always underwritten imperialism.
I set up Let's Encrypt for an older Exchange server a while ago. While I love the result, it was NOT a simple, one-line exercise.

Up to date documentation was near-impossible to find, and the scripts that came out of the box on the recommended client needed some fixing. The whole thing took about half a day, plus some hours a few weeks later once the unforgiving anti-abuse thresholds I accidentally triggered during end-to-end testing finally expired. Definitely wasn't a pleasant experience.
I'd be happy just if they were forbidden to change articles after publishing, and not say that.

Because currently, they post some bullshit news and create some random outrage. Then someone points at some bullshit claim in their article, and they just quietly change the article (remove the claim, add "allegedly", etc.), and act as nothing was wrong. Or in worst case scenario, they quietly remove the whole article.
Partial Scripting and You
I’m not sure what point you’re making, if any. Care to elaborate?
That "tomorrow" was earlier this year.
I have to say, I long favoured tabs myself - but I eventually gave up and decided not to die on that hill.
Leaving on a whim without caring about what the employer or the family would say is the sort of expected behaviour
Not many if its Qubes OS.
I know of, and buy from, multiple employee owned (flour) companies. Don't know how it is to work for one, though. It's an interesting question why they aren't more common.

https://en.wikipedia.org/wiki/King_Arthur_Flour

https://en.wikipedia.org/wiki/Bob%27s_Red_Mill
In search of the buzztweet.
Introducing Forge, a new way to build and run apps for the Atlassian cloud
As if you can count on Stadia being around for awhile....
China-made operating system UOS to replace Windows
I'm not a very good programmer, but this article was really well laid out and easy to read. I'm slowly learning Lisp to hack on Emacs and org-mode/org-babel, and I wish more people wrote stuff like this article!
The computer theory version of Godel's result is the halting problem, and that is applicable all over the place, in the same way that physical conservation laws imply a large variety of invention are impossible.

For example, it is impossible in general to understand what an English sentence says, because that sentence may describe the operation of an arbitrary program, and understanding an arbitrary program is undecidable.

Another example, it is impossible to detect all variants of malicious programs, because that requires understanding what all programs do, which requires identifying whether an arbitrary program halts or not.

Yet another example, optimal machine learning is impossible, since that is based on Solomonoff induction, based on Kolmogorov complexity, which is uncomputable due to the halting problem.

And another off the top of my head, it is impossible to create a general program creating program, such that you give it a well defined specification and it spits out a program that meets the requirements, if the requirements are satisfiable, since that requires solving the halting problem.

Finally, humans, while not optimally satisfying all the above tasks, do quite a decent job at these tasks, which is surprising if humans themselves were some sort of algorithm. So, this strongly suggests the human mind is doing some operation beyond computation, which in turn would imply that human intelligence level AI is impossible in theory, and thus impossible in practice. Furthermore, if the human mind is indeed doing something uncomputable, this has technological implications that human in the loop computation approaches are inherently more powerful than computation alone, a vastly under researched concept, although arguably the secret to the success of most AI/ML/datamining companies these days, such as Google, Facebook, Amazon, and Palantir. And the software industry in general is proof of this concept that humans are program generating processes performing much better than the halting problem would lead one to expect if humans were indeed mere computation.

Anyways, a whole bunch of impossibility implications, which have the practical application of protecting your wallet from comp. sci. snake oil salesmen, and the intriguing possibility 'beyond computation' technology.
It's so frustrating right?

"I want a robot to cut my hair in 2 minutes because why would I want to have to talk to a human being"

Or one that really alarmed me was Rob Rhinehart's (Soylent) comments about groceries

https://www.businessinsider.com/soylent-ceo-rob-rhinehart-qu...

>I have not set foot in a grocery store in years. Nevermore will I bumble through endless confusing aisles like a pack-donkey searching for feed while the smell of rotting flesh fills my nostrils and fluorescent lights sear my eyeballs and sappy love songs torture my ears.

We're turning into a reclusive, anti-social, afraid of each other, society because those are the types that get funding.

Shakespeare was a fortune teller:

>And private in his chamber pens himself,

>Shuts up his windows, locks fair daylight out,

>And makes himself an artificial night.

>Black and portentous must this humor prove

>Unless good counsel may the cause remove.

I don't want to spend all of my time alone, staring at one display or another, interacting with code or algorithm-selected content.

Thank you for being one of the sane ones that sees the absurdity of it!
Insulin prices double, causing many people with diabetes to turn to extremes
By soon you mean in 20 years? Self Driving Car technology isn't ready yet and where are you going to get the humanoid robots to deliver packages over arbitrary terrain?
0,5 degrees difference only for a population change of 5 billion people? Not very plausible (low vs. high growth).

These simplistic models are counter-productive IMHO.
I agree that having an elegant and secure solution to enable HTTPS on
non-internet-facing equipment would be nice. I work mainly on embedded devices
and all my admin interfaces are over HTTP because there's simply no way to ship a certificate that would work anywhere. It would be nice if you could easily
deploy self-signed certificates that would only work for local addresses and
only for specific devices, although of course doing that securely and with
good UI would be tricky.

In the meantime having big warnings when connecting to these ad-hoc web
interfaces makes sense I think, since they can effectively easily be spoofed and
MitM'd (LANs are not always secure in the first place so it makes sense to warn
the user not to reuse a sensitive password for instance). It's annoying for us embedded devs but I think it's for the greater good.
Because a lot of people(Grand majority, i include myself) are easily susceptible
Which free bands? Ham bands? Or ISM bands? Because it seems like nobody cares about any anti-encryption rules on 2.4GHz and 5GHz.
This seems to be a continuation of “Designing Calm Technology” by Mark Weiser and John Seely Brown in 1995: https://calmtech.com/papers/designing-calm-technology.html
Well, a XHR cannot programmatically decide whether a self-signed cert should be trusted. Perhaps browsers should pop up a warning bar in such cases, explaining that some site functionality is being blocked for security reasons. Clicking it would take the user to the big scary warning page, where they would be allowed to indicate that they trust the self-signed cert (permanently or not) and reload the original page.
> Macs don't have GNU make 4, only 3.81

Released April 1st, 2004.
Regulations. How well-intentioned people kill every free thing.
If you think ticketing homeless people will solve the homelessness problem, then you are the reason homelessness is still a problem.

Articles like this make me sad.

Humanity can do better.

What's wrong with us?
Well, kind of.

I'm using make to build a content graph, part of that is http:// dependencies. The underlying concept is that you can define protocols (https would be one) and then teach my make pre-parser about building them. An example would be:

myfile.js: https://code.jquery.com/jquery-3.4.1.js local.js
uglifyjs $^ -o $@

The 'https://' is rewritten to map to a local cache directory (so it's little more than a glorified variable, but still more intuitive since protocols are so familiar from our use of the web), so the above code is actually something like

myfile.js: cache/https/code.jquery.com/jquery-3.4.1.js local.js
uglifyjs $^ -o $@

and that in turn invokes a rule that makes a HEAD request to the URL - if that is outdated against the local copy, that gets renewed. So, in regular make code, something like this:

cache/https/%: cache/https/%.head
curl -Ls https://$* > $@

cache/https/%.head: cache/https/%.head.force
rsync --checksum $< $@

cache/https/%.head.force: FORCE
curl -Ls -I https://$* > $@

I could see a way to turn this around, though. The concept of "protocols" is currently only GET in my setup, but I do plan on supporting the idea of POST, eventually. So what you're asking for is that, I guess.

I must say, though, that in my now three years of using (or abusing) make, "just make it another file" is surprisingly often the right next step. In the POST situation, it would simply be a local file that has direct or side-effects attached that do what you're expecting it to do.