skysight-inc/HackerNews huggingface dataset:
I'm confused why the author keeps associating containers with total insecurity. Docker's approach to whitelisting access to the filesystem has been great in my experience. I've managed classic multi-tenant Linux servers before, and I've pretty much always found lots of examples of services having read or even write access to each other's files unnecessarily. Docker's strong whitelisting-based approach to filesystem access seems so much more ideal.

In the video of someone breaking into a Kubernetes cluster, they start off with restricted kubectl access. Okay, so restricted kubectl access isn't a strong security boundary. I don't think it's a big deal to a lot of people's use-cases. I didn't know it was a feature; the lack of a strong feature like that is only a dealbreaker to certain kinds of setups. It doesn't seem necessary for sandboxing different services apart from each other; it's for giving different sysadmins/developers access to deploying to different parts of the cluster. I'm going to make a wild guess that the issue isn't core to and unfixable in Kubernetes, because the person in the video shows a way to plug the issue. Summarizing this as calling Kubernetes security a clusterfuck is way over the top.

I could believe that the author's NanoVM project is even better at security out of the box, but I find the way they present the argument as overblown, and they don't introduce NanoVM for comparison until the end, so I think the arguments are doubly misleading because most people are going to be comparing containers to the classic plain multi-tenant Linux server model, and Docker and Kubernetes seem like at least an improvement to that in security.
I know. It might even work. But until there is really hard proof and the side effects are well documented saying it's out there is tantamount to telling people to self-experiment, prescriptions or not. Illegal drugs are a thing.
The links to the articles are in the 2018 comment I linked.

The Urmson one is from March 18, 2016 talking about a 5-30 year time frame, and the Gurley one is from April 2017 talking about a 25 year time frame.

Without any more context, "drive a blind man around town" has about 3 decades of wiggle room in it... If you look at Waymo's recent blog posts, they have similar words that sound good but leave wiggle room, and they've been doing that forever.
Razer will start manufacturing surgical masks to help fight Covid-19
The epoxy gun described below isn't that far off.

Yeah, there are a variety of books on microreactors in general. I think my recommendations would be dated.

One cool one was talking about fluidics in general including how people used to think it would be simpler to build fluidics-based computers because of the size of vacuum tubes. So they had fluidic versions of things like diodes and amplifiers.

Sorry I can't remember the names though, they were mostly good finds at the library.
That part of the app is a bit rough still, that kind of drag & drop interaction isn't supported yet.

If you're under macOS you can copy/paste images to attach them.

Otherwise you can add attachments by clicking the attachments icon (the little clip) and then clicking "Add attachments...", and then link to them via the special `@attachment` token mentioned in the tutorial [1]. Or you could have an attachment wherever you want in the file system and link to it like you normally would inside Markdown.

[1] https://tutorial.notable.md/
Uber rides down 70% in cities hardest hit by coronavirus
> The target country starts a propaganda campaign to blame the sanction-issuer for all their problems, which the citizens mostly believe

Because it's at least partly true. They are the ones issuing the sanctions.
30 months is a major punishment for downloading a doc that tracks technical goals and doing nothing with it.
Some large teams have tried to overcome this by making up every such scenario, coding it into simulation, and testing their system.

What makes this challenging is that there are more such scenarios that might occur than there are grains of sand, or stars in the universe.

Those teams end up thinking they did all the necessary work and then go test, just to find out that there's a new edge case. At Starsky we called it Safety Theatre
Netflix forced to give customers a lower quality product instead of ISPs forced to give customers the product they're paying for. Classic!
Arcade Hub – my first project about Apple Arcade service
Hey fellow hackers!

I've created a web app to help easily find Apple Arcade games that suits people's taste.
App is here: https://arcade-hub.com

It's a very simple first version of the app and it's my very first project ever. I'd love to hear any feedback on it.

In case you're curious I created it with React, Node.js, MongoDB, GraphQL with Apollo. There is a lot of base-words because I use the project to experimenting and learn new technologies. I use APple iTunes Lookup API to populate the data for games.
I still have to add a new Apple Arcade game ID manually, but other data populates automatically and updates every night.

I also decided to open all stats to public yesterday and changed visibility to Simple Analytics so you can check if you curious: https://simpleanalytics.com/arcade-hub.com

Main features so far:
- All Apple Arcade games are listed on one page, newly published games will be added weekly.
- You can find additional information about the game: average AppStore Score, Release date, Last update date, genre, screenshots, description, etc.
- You can sort the games by "Rating", "Name" or "Release Date".
- You can filter the games by one or multiple genres.
- Two view types are available for the main list on the larger screens so you can choose which one works best for you.

Things I keep in mind to add the feature:
- Try to add more information about the game from AppleStore
- Add more game scores, for example, Metacritic.
- Add the ability to sign up and add games to "wishlist" or mark it as "Completed". That way you can filter only "not played" games.
- Maybe add the ability to score the games by yourself. And eventually, add some review system on the site.
I would love to hear your feedback and maybe feature requests on what you personally want to see in the app. Let me know!
> I would argue that the stable syscall interfaces is one of the main drivers behind Linux success. Containers as we know them would be quite different if they needed to somehow merge the kernel version appropriate .so files into the fs. They would forever remain just sandboxes of the essentially the same distro as the host just like they are on Solaris/FreeBSD.

I suspect the order of cause and effect is reversed. Linux is amazingly successful and as a result containers were shaped to fit the capabilities and needs of Linux. The reason Linux has a strong syscall ABI is because it doesn't have a userspace. Glibc is only loosely related to the kernel and cannot be the kernel's ABI compatibility layer, as they are wholly independent projects.

Another way of looking at this is that the overhead and additional abstraction of containers is a workaround for the deficiencies of Linux jail/zone facilities (i.e., it doesn't have them; you have to carefully piece together a secure sandbox out of various cgroup and namespace components).

> Also something like WSL would be impossible

Some interesting things about that:

1. WSLv1 was a partial Linux syscall emulator, sure.

2. Microsoft gave up on that approach and WSLv2 is just an Ubuntu VM running in HyperV. So maybe it was impossible anyway — Linux just provides a ton of system calls and it will always be difficult to faithfully implement all of them. And as some side threads have noted, Linux likes to break ABI of sysfs files all the time. But those don't count, for some reason.

3. FreeBSD has a linux syscall emulation layer (that long predates WSL) using essentially the same premise as WSLv1. You're correct that this style of implementation (syscall ABI) only works due to Linux's syscall ABI choices.

4. However, something like WSL is not impossible against a shlib ABI. The canonical example here is WINE. WINE implements (much of) the Windows NT shared library (DLL) level stable ABI. The same could be done for other systems that provide ABI stability at the DLL level, such as MacOS or FreeBSD.
What you're saying is "a disease kills people who were going to die from it anyway". No, those people weren't going to die if not for COVID-19, and you can say the same thing for any disease, tautologically.
The lesson if anyone is paying attention that if you’re going to steal $1, better make it a million.... but slow down before you hit Madoff levels. There is a sweet spot north of a million; less than a few billion.
They can decide to arrest you for resisting arrest?
Italy is older, yes, but still hovering around an 8.2% death rate, far above China's 4%
Temporary hospitals are being set up, but we simply don't have the capacity to build life–saving machines fast enough to handle the no-social distancing scenario. Neither did China, really.
Four men executed for 2012 Delhi bus rape and murder
I think capital punishment may not be enough to deter the crime fully (at least not for everyone). But, the person may think twice if their pension wasn't around to go to their next of kin.

It's not just about punishing this heinous crime, but rather, it's about setting a precedent, and ensuring that there is sufficient deterence to make sure this never ever happens.

It's kinda like that time, someone got 20 years, for Swatting someone. It set a precendence that will never be forgotten.
My findings after browsing the web without a User-Agent header for one week
How do you build containers safely in a multi tenant setup?

Any open source repos to check out?

My environment has the things in the cloud, but it is still not seconds. Even npm watch takes several seconds, let alone docker builds almost always take minutes
Sí, señor
How to double read throughput easily for a NewSQL database
> Isn't it strange how we never had this many problems with bad cops before the invention of body cameras?

Rodney King? And the subsequent LA riots in K-Town come to mind, where they arrested the Korean merchant owners defending their homes, busniesses and property.

I think you need to understand that this is systemic, Police officers are vetted and no longer considered if they have High IQs, and the courts allow this:

https://abcnews.go.com/US/court-oks-barring-high-iqs-cops/st...

Think about the implications you have with just 20 years of such low barriers of entry, and the ramped up militarization of police and its tactics?
Early epidemiological assessment of transmission potential and virulence COVID19
And reading back over those articles, they hit it right on the head:

Over the next five years, hundreds of companies will claim to have successful self-driving cars, Gurley said. But he said he’s reading between the lines of press releases, which often tout tests in very controlled environments that do not totally reflect the real world.

“The part we haven’t figured out yet, the last 3 percent, which is snow, rain, all the really, really hard stuff — it really is hard,” Gurley said. “They have done all the easy stuff.”

-----

Urmsson was trying to having it both ways, but if you read between the lines it's obvious what he was saying:

Urmson put it this way in his speech. "How quickly can we get this into people's hands? If you read the papers, you see maybe it's three years, maybe it's thirty years. And I am here to tell you that honestly, it's a bit of both."

He went on to say, "this technology is almost certainly going to come out incrementally. We imagine we are going to find places where the weather is good, where the roads are easy to drive — the technology might come there first. And then once we have confidence with that, we will move to more challenging locations."

In an interview, a Google spokesman agreed that Urmson was describing some aspects of the project differently than the company had in the past. "Yes, there was some new stuff in there," the spokesman said. "That was obviously the intention of the speech: To say some new things."

-----

That was OVER FOUR years ago. People didn't get the message and kept pouring money into it. Prediction: if we get economically viable level 4+ self driving in the next 10 years on a $1B+ dollar scale, it will come by way of a breakthrough, not by an extension of existing tech. That is, by throwing out tens of millions of lines of code that's been written and billions of dollars in hardware that's been designed and manufactured, and taking a different approach.
Right now apparently they're treating us a lot better than the European isps. Outside the HN bubble no one is really surprised to hear about a service quality problem in Europe though.
You have to commit to it and have a bit of self discipline like any other exercise regime. But if you can do that it's a lot more fun than just running on a treadmill and lifting weights. The game inside is actually pretty good, and has some depth (but that depth kinda slowly unlocks as you play).
So let's provide the virus all the hosts, so it can mutate in every kind of way?
> Almost better, as it is so limited.

Except that with web push the block button is two taps away. Once I’ve given away my phone number that’s it, it can be sent to anyone, I can receive messages from anywhere.
Link isn't loading for me, anyone have a backup?
Interactive map and visualizations for showing latest global cases for Covid-19
So don't have nontrivial behavior in a cleanup? That sounds about as antithetical to C as nested functions.
Global heatmap and trends of coronavirus cases
The question is from the website, not my own
I prefer informed stance, like from pandemic health experts.
What's hard about this comparison is knowing exactly what you saw. If the safety driver disengaged 1-3x, it might have felt like a robotaxi drove you all over; but the effort to get that system safe for unmanned regular service might take another decade.

If it was super mapped and following a fixed route with object avoidance; the difference between a car that can go on an HD-map track and one that can go point-to-point in a city is also maybe a decade.

We humans have limited empathy for what is really really really hard for computers. Many know that's true for an app, but somehow ignore that knowledge when it comes to autonomy.
What's the difference between a platform that censors and a platform that sorts in a useful way?
But working under Catherine Hamlin are a bunch of people doing "irrelevant" things. Someone has to empty the garbage bins in the wards, but the hospital wouldn't work without that person. You don't have to run the show to be making a contribution.
Thanks. I resubmitted as a post after reading those rules this morning as the intent was actually about listening to user feedback, not the campaign. Although, the "Show HN" seems very focused on SaaS offerings as hardware projects can't be "tried out".
This wasn't "an idea" being stolen, it was years of work and documents, nearly 10GB of it. That's very different from a big company taking someone's idea and recreating something similar from scratch.
Yes, a request made on the behalf of all Europeans by their government.
so of all those minorities you see pulled over on the curb, 90% of them were just being arbitrarily frisked and had nothing on them and were not arrested, but you wouldn't know the difference, some of the other 10% had drugs planted on them, and many of those weren't their first random stop

the other validation of all those arrests and prison population records, many of them simply took the plea deal or violated parole where anything from any minor infraction to exercising a freedom you already have such as staying out after a certain hour imprisons them for the original length of the sentence

the other validation is all the violent crime stats, which comes from communities demanding certain areas are policed, based on the images of 90% non-arrests already burned into their mind

all while all the minorities have been trying to say this is exactly what has been happening while the majority power remains in actual and intentional denial, now relying solely on an unquantifiable comfort that this is statistically rare, because it has to be, .... right?
> Intoxication has also been reported following skin contact with the plant; a case was reported where a family of five people rubbed the plant onto the skin and were poisoned, with two children dying

From Wikipedia
Thanks, do you know the number tested in Italy?
Does MSVC support C99 yet? Much less C11 or a future C2x?

Their priority has always been C++ and for some time their stance on C was basically "I guess we're willing to compile the subset of C that is valid C++."
So... on another note... what were the career prospects like for a mid-level ex-Okhrana officer ca. 1918?
Yeah. I know a new one is out now but still selling the older models... but I kinda like Microsoft's approach. since even the original Xbox One can still run new releases from my understanding. Instead of each new console requiring all new games and OS.
I loved the shrines. There were some really cool designs, like the one that was basically minigolf but you whacked stuff with your weapons. And the electricity puzzles (that you could cheat at if you were savvy and realized all your metal equipment could conduct electricity the same as the actual puzzle blocks).
Coronavirus Pandemic Covid-19: 9 Symptoms to Watch For
Bitcoin is useless. There is no need to over analyze it.

The price of BTC doesn't move in sync with its hashrate, so discussing the impact of halvening and so on is meaningless.

Gold dropped a bit because people had to sell it to cover losses elsewhere. Bitcoin crashed 50% in one day because it's mostly owned by traders who got out. It would crash even more if it was easier to get out of it.
CA governor projecting 25.5M COVID19 cases in CA in 8 weeks [pdf]
This to me very much assumes no leap forward. See the start of deep learning - sudden rapid progress. I don’t see why there can’t be another jump like that. Much like the chip manufacturers mentioned in the post.

No idea what that advance may be but it’s out there I think
This is the sort of poisonous waters where basically anything this officer has ever said as part of their job should be instantly discounted. Anyone convicted based solely on the testimony of this officer should be released, their record stricken, and they should be well compensated for what must be assumed to be false evidence.
USD appreciation in 2008: safe haven, carry trades, dollar shortage (2009) [pdf]
State-owned forced organ harvesting industry in China
Two and half years is a hell of a lot of jail time. I seriously wouldn't wish it on my worst enemy.
"The main problem I have with Chromebooks is that they are not guaranteed to be supported by Google for more than 6.5 years. " I was seriously interested/engaged in this then stopped there. I thought to myself, if I am still using the same Chromebook in 6.5 years, either an apocalypse occurred or I am so poor that I will have other problems that are more pressing than worrying about Google support.
Are you sure you need to?
Every 2FA login I have seen was designed for a single person.
Perhaps instead of sharing passsword and 2FA between multiple people, you can create separate logns?
"But I'm not sure what this will do to Open Source in the long run."

I don't know about Open Source as a concept/movement, however it will destroy Linux as we know it.

More and more developers are already flocking to it (and VSC) for writing Linux software. All it needs is a killer library (Windows GUI bindings?) and/or extensions that could push developers into writing software that expects to be run under WSL instead of the real thing.
It may seem stretched, but WSL is to Linux what WINE is to Windows; so how many of us could run Windows software under WINE without any Windows installed?
WINE didn't damage Windows because there are simply too many native Windows installs compared to Linux users with WINE, but what about the other way around? Linux wouldn't stand a chance.
Microsoft is slowly gaining full control of Linux, one developer at a time, and nobody seems to care.
N64 was the worst of that gen by far in terms of frame rate though, a lot (maybe a majority?) of ps1 and saturn games ran at a solid 30 or 60fps.
We are in an Orwellian situation: there is extensive surveillance, but its use is firmly in the hands of the government and its institutions.

if the government were promoting justice and protecting rights, that would be one thing, but in cases like this, it is not.
I'd argue the opposite that this was extremely expensive for Uber.

The legal nightmare which resulted a loss in 0.34% of equity and combined with having to throw away whatever they had[0] before as part of the deal with Google is not cheap at all.

Anecdotally, I have engineering friends on the Uber self driving team and they talk about how they are just starting over again and how far behind they are as a result of it.

This is definitely a path Uber would not choose to go down again in hind sight. All to say, Uber did pay a significant price for "30 months of someone else's life".

[0] https://www.wired.com/story/uber-waymo-lawsuit-settlement/
The responses there are predictable and uninteresting. I'm much more interested to see how a cop subreddit responds to this.
You can, however, choose the circus you join. If you feel meh about what you do and you feel meh - or worse - about the organization you do it for, it's normal to feel uncomfortable.
Does he still owe any of the $179M to Google or does that go away? Is he still in bankrupcy?
No it isn't. As the article implies, the number of miles driven, or even the amount of time driven, isn't a good estimate of AI quality. The best standard is the number of unusual events that the autopilot could handle without human intervention.

I've had 30 hours of driving in a Tesla, and I had to intervene 6 times, twice with no warning. That doesn't mean that Autopilot isn't a useful tool, but it does require operator diligence.
Is there sufficient public data to plot and find the true sweet spot?
There's a Ian Banks short story where one of the omnipotent Culture spaceships visits the Earth and scans it on its whole and sees all the fossils every fossilized.

I always found this an fascinating thought. Imagine technology progresses so that we can just scan the whole earth, or at least large parts of the surface. Then you could look at everything ever fossilized in one go, and completely change natural history.
Ubershaders: A ridiculous solution to an impossible problem (2017)
Waiting for it. Sad but good read.
First of all, $50k a sememster would be the top 1% most expensive colleges out there. Probably more like 0.1%.

Secondly, learning things that are not specific to ones job is the definition of well rounded and while some companies may only want socially inept specialists that can do nothing else, society is much better when it is made up of well rounded individuals.

You sound a lot like high schoolers taking math classes. We are -never- going to use this in real life. No, you probably won't, but the point is learning how to learn, organize, study and become more intelligent in general.
So the article is just going to dismiss the fact that he was targeting specifically Afro-Americans?

Not only he was setting people up, but he was specifically setting up black people. So fucked up.
Yes: you can give a human the tools and instructions and they'll sit there for ~8hrs a day doing it autonomously.
Heck, it seems like a good investment. It's a clear-cut case with media exposure, relatively limited downside, and unlimited upside.