skysight-inc/HackerNews huggingface dataset:
In the Apple Sandbox Guide v1.0 [1], it mentions Dionysus Blazakis' paper [2] presented at Blackhat DC 2011.

In the latter, Apple's sandbox rule set (custom profiles) is called SBPL - Sandbox Profile Language - and is described as a "Scheme embedded domain specific language".

It's evaluated by libSandbox, which contains TinyScheme! [3]

From what I could understand, the Scheme interpreter generates a blob suitable for passing to the kernel.

---

[1] https://reverse.put.as/wp-content/uploads/2011/09/Apple-Sand...

[2] https://media.blackhat.com/bh-dc-11/Blazakis/BlackHat_DC_201...

[3] http://tinyscheme.sourceforge.net/home.html
I did pretty well at running a race, a few years ago as a typical sedate developer, but training for 3 months. I was sick (i.e. flu-ey a lot, nothing uber serious) at the time too - I was running to help see if I can fitness my way out of it.

And I put a lot of it down to reading about breathing in for 2 steps then out for 3 (the total is an odd number so you change sides, so 3/4 is good too). Thanks for whoever wrote that blog post! The process really focuses me and it's like a drumbeat in my mind. If I sprint it changes to 1/1 or less though, and I stop using the nose!
Good points, however is still think it's mostly about cost and the added increase in supervision potential is just a huge bonus.
Don’t let them participate in scrums.
Awesome, this could enable cheap high-resolution 3D displays
And NixOS is a great idea, but Nix advertises itself as "a powerful package manager for Linux and other Unix systems" in its the official site's description. Yet by not abiding to the FHS, they opened themselves up for breakage.
Highly recommend "box breathing" as well. I've found this app to be great for both meditation and breathing exercises: https://apps.apple.com/us/app/oak-meditation-breathing/id121...

Additional links:

- https://time.com/4316151/breathing-technique-navy-seal-calm-...

- https://www.youtube.com/watch?v=FJJazKtH_9I

- https://www.youtube.com/watch?v=GZzhk9jEkkI
The same mistake can be done outside of containers though. Any software needs to be maintained and its dependancies kept up to date. Containers might give the feeling that it's not a necessity anymore as it allows to spin up an environment in one command, but in the end those dependencies are still there.

My experience is the opposite. I once had started a job with totally outdated software that couldn't be run anywhere else than the old server it was currently running and had never been touched since 2008. We were able in the end to bring everything back up to date and create containers that are:
- easy to update
- allow devs to work on their favourite os (windows, linux or macos)
- does not require someone help devs to fix their dev environment regularly
This has nothing to do with 'free speech' though.

edit: apparently I'm rate-limited from making new posts, but JackFr's response to me below is completely fair. Sorry for not reading more thoroughly!
> Stacked Bar (a pie chart for grownups)

That made me laugh, but the scale on the y-axis is odd. The inputs are all integers but the generated tick labels are floats (e.g., <span class="TickLabel" style="--tick-label:'99.8'"></span>).
LOL - Just be glad it wasn't a keyboard device!
Fauci offers candid advice to city leaders
It's not that simple. In the west it's the "alt right" or similar that needs to bypass censorship. But in China, it's pro-democracy people.

Even inside a country, it changes. Dissenters 50 years ago are not the same ones as today. The left protested globalization 20 years ago; today it's the right.

My point is: we should let all ideas out there and not fight to censor the other side. Fight ideas with arguments and evidence, not censorship.
Wasmer is a project I'm watching closely for many reasons. I feel as WASM becomes more commonplace the role Wasmer plays will become clearer.
How is this the obvious conclusion instead of lowering unemployment? I’m not arguing in favor of one or the other, but you’ve jumped to a massive conclusion.
Nothing about that says that the path has to be /nix — it would work just as well with the standard layout under /opt/nix.

It also seems like it doesn't really help with the stated problem since a developer who would hard-code /usr/bin/nginx but not list it as a dependency would almost certainly just use whatever `which nginx` returns. The thing which would solve that is depending on a precise version or hash, and if you're doing that, the path prefix doesn't really matter.
This is for whenever I need to slow down for whatever reason. I don't do it every day. I am not a believer in spiritual so this is a completely mechanic breathing exercise for me and I can immediately feel my heart rate going down and overall better feel.
Ask HN: Resources on real world Deep Learning models?
I think it would be interesting to share articles/blogs/etc. that describe Deep Learning models/architectures that are used in the industry.
For example, the Andrej Karphaty (Tesla) talk at Pytorch Devcon: https://www.youtube.com/watch?v=oBklltKXtDE
Nothing was wrong with it, except that it violated convention. As I said: "The big difference between the two is the later conforms to convention while the former doesn't."

Violating convention comes with risk. Whether violating convention and assuming that risk is a good idea depends on whether the risk is worth the reward. For Nix, I don't think it was.
That sounds like a plausible reason. Timeline checks out.
Did you read the article? This has nothing to do with mobile.
Radiometric dating is also used on the layers around the fossil. In this case of the hydrocarbon deposit [0].

[0] https://science.sciencemag.org/content/308/5726/1293
Even a box.
In one hospital. That alone makes it pseudoscience. A years worth of suicides is likely between 10-40 suicides, which is tragi but doesn't show that the quarentine is causing the problems it says. For example, the rise could be due to medical workers being overtaxed due to the pandemic, or some change in which hospital is receiving patients like this.
Since Drive doesn't generally delete users' files for policy violations maybe the safer assumption is to assume that it wasn't deleted unless there's evidence that strongly suggests otherwise.
I trust my BBQ more than any browser nowadays, so I would probably pick that.
Every open office I've worked in has been about cost, not productivity or control
TypeORM is very much a traditional ORM. You define your model classes, and the relationships between them, in code, and TypeORM takes charge of creating and modifying your tables. Then you use the model classes to query the database, without really knowing what SQL is going to be issued. TypeORM is complicated: there are lots of new abstractions to learn, and you’re a long way from the raw SQL.

Zapatos aims at a very much reduced level of abstraction: it’s really just a much more ergonomic, and fully typed, way to run SQL. I created it mainly out of frustration with TypeORM, after converting an existing code base from CoffeeScript to TypeScript and from Sequelize to TypeORM.

My recollection is that TypeORM did something really dumb and unexpected, like deciding to catch a unique index violation and silently replace the offending record, and that this was what finally prompted me to decide to replace it with something homegrown. I also found using transactions with TypeORM clumsy and painful.
> The image will only contain the compiler and build tools. There is no reason to change any of these tools.

Smacks of "you're holding it wrong" thinking about consumers. Professionals should sharpen the saw by continually customizing their environment.
Now there's a name I haven't heard in a very long time... I'm not in game dev right now, though, so grain of salt and stuff. But I did play around with Panda a long time ago, and thought it was fine for getting some 3D stuff going quickly without dealing with the headaches of OpenGL. Similar to PyGame but for 3D. It's neat that it's still seeing development.

Besides the old Pirates of the Caribbean game, which I can't even find mentioned on their site anymore, have there been any commercial games developed with it? I was always under the impression that it was primarily targeted towards CMU students in their game design curriculum. (DigiPen, a school most known for game programming, has in its main degree program students building their own engines from scratch, but there are at least 3 in-house engines that have been developed over the years meant for freshmen and game design students.)

I tend to treat the "commercial use" barrier as the key one to initially evaluate "niche" engines. Like, Ogre3D is fairly "niche" too, but it's been used in many commercial games. That says nothing directly about the relative quality, but it does imply some good things if people were willing to risk a business product on it.

Personally I'd consider Panda again for a game jam or as you mentioned a non-game-but-3D-needing thing, but where for both I'm also expecting to use Python. But I'd want to check out Python bindings to Ogre and whatever else is out there now these days too. (Godot has been top of my "if I ever want to just make a game and not spend time in the weeds doing things from scratch in a non-mainstream language, use this" tools.)
Wouldn't that increase hyperventilation, causing a further drop in CO2?
And also allowed a jailbreak app in the iOS App Store. Yes, it only happened once (that I know of), but it still shows you can't really be oblivious to their practices.
Sometimes measuring someone's effectiveness is as easy as "I sold that, here's the check, that's my effectiveness" but I've also noticed that measurement is often incredibly sloppy in business, and people rarely seem to get called on it. Making a serious effort to eliminate confounders is unusual. I think a lot of folks in non-programming jobs do, to a fairly high degree, just make shit up, pretending that they can measure the effect of various initiatives much better than they can, and for whatever reason this is rarely considered a problem or questioned.

Some of them surely realize they're just slinging barely-if-at-all-justified BS, but I also think lots and lots of people are just terrible at reasoning about that kind of thing and don't realize how meaningless the numbers they're generating are. They're trying, they just suck at it and no-one's bothered to tell them (or seems to care).

Possibly programmers are more sensitive to this than most, and are reluctant to put forward "bullshit" numbers that would, if they did, in fact be accepted as reality by the folks "above" them. Meanwhile someone down the hall's being promoted for numbers that are even more a work of fantasy than those, and may not even be intentionally deceiving anyone.

Note that the sales folks don't sweat over how much of their numbers can be attributed to the people making the thing they're selling. Those numbers are theirs, period. "Did I sell that or did Feature X put it over the top?" fretted no salesperson ever.
> I keep instinctively trying to hit Ctrl+Z to undo, which doesn't work

I've only tested on Mac, and Cmd+Z works. What platform are you on?

Sandstorm is a maybe, but we're doing great on a $7/mo Heroku instance. :-)
Option A: Decrease the amount your site is shared by X%. Get ad revenue from 100% of viewers.

Option B: Maintain current number of visitors. Get ad revenue from Y% of viewers.

Depending on the values of X and Y, the ad revenue may go up or down as a result of requiring unsafe browsing. Your conclusion assumes that X is always equal to zero.
Great. Bartholomew JoJo was my other suggestion :-)
My 2011 era MacBook Pro has run Linux most of its life. It runs super fast compared to its performance under MacOS even a year into its existence.

I've heard people ask me "why bother with Linux when MacOS is Unix?". Well technically it is from its heritage, but it gets less unixy by the day.
I don't understand the comment. Wim Hof has a very specific program.
Cue Roger Zelazny, "Jack of Shadows".
That's on the immediate roadmap: some way to jump into a board immediately and convert to login only if you want to save or collaborate.

On the bright side, we don't even ask you for an email address (yet).
Thank you. Here is a link Firefox : https://addons.mozilla.org/firefox/addon/dark-background-lig... Chrome: https://chrome.google.com/webstore/detail/dark-background-an...
Red Bull Is Disgusting. and It Perfectly Captures Why Capitalism Is So Great
Indeed and yet, paradoxically, living longer is quite literally what's killing you¹...

1: Cells have two ultimate fates: they either fail to resist cancer or, if they succeed, eventually die of doing it, sort of wear-and-tear, i.e. "ageing" as we call it. Lookup telomeres and cancer. Therein lies the recent hype/hope of increasing human life expectancy by a lot, perhaps orders of magnitude.
> What platform are you on?

Firefox on Linux.
> The web browser is easier to replace than almost any of those things, though. I regularly use 2 or even 3 different web browsers on the same computer and another on my phone. If Chrome went away, there’d Be basically no impact on my life. Same not true for operating systems as it’s harder to switch.

I'm not so sure. Yeah you could fork Chromium or Firefox (the only two browsers left), but "web standards" have ballooned and gotten so bloated that you'd need a pretty significant engineering organization to manage to support it yourself.
> what?

You're skipping the key part: "I say if an organization requires fax for anything in 2020, not just as an option but as the only way to do a specific thing,"

If they haven't bothered to provide a non-fax option for submitting data by now what would make you believe they ever will unless forced? If you don't understand how that's a problem then we don't exist in the same universe. I can't explain it to you.

> Paper document facsimile is a useful facility basically as long as people fill or sign things out by hand or with stamps, and with Japanese even just coding people's names correctly into a computer is a task that requires both specialized skills and tools.

That's what scanners are for. Scanning documents to store or email is perfectly fine.

I'm talking about the specific act of using facsimile technology to transmit said document at low resolution in pseudo-realtime (but not really in most modern implementations) over telephone lines.

There is no situation where there's not a better answer unless one party refuses to use more modern technology.

> These sweeping statements just strike me as ignorant and devoid of empathy.

As someone who has to support fax users, yea, I'm devoid of empathy for them. Entirely. Faxes have all kinds of problems that are a pain in the ass to prove to the user that it's just the horrible ancient tech they insist on using.
It's the transition that seems strange to me. They have been ripping on politicians all this time, those who were anti-lockdown in the beginning of the crisis.

Its not just the anti-lockdown comments that turned me off. I can agree to some degree with that. There's more like in the episodes that followed afterwards with Brendan Schaub or fight companion where they are just spouting stupid shit. But I guess you can't always invite the best guests.
Well, it's no less important than this.

"14 states have more than one time zone. Do you know which ones? "
> as long as you provide the unminified versions to Google/Mozilla during review time.

I have been publishing extensions for a while and never found Google asking me for the source code, is there any hidden option to submit it?

Another detail I have missed is release notes, Firefox is supposed to provide those but I have never been able to add them, Chrome doesn't seem to display them but I have got my submission rejected just after "improving" the description.

> On chrome vs. browser namespaces, a quick 'let chrome = browser;' can help you keep the diffs small between versions. I have yet to find a complete solution to fixing 'forked code' between Google/Mozilla Extensions/Add-Ons.

Firefox actually supports the chrome namespace but you need to be careful as some other APIs are different, for example, in Chrome the notifications has a richer set of options but you need to be careful to not use the ones not supported by Firefox.
I can't edit anymore but it seems like the OCSP link could potentially be a red herring just checking the cert for the next request to https://api.apple-cloudkit.com/. It's worth looking further!
OK... How would I find out from Google why they deleted original content written by me and stored in my account?

How do I effectively appeal the action?
This all feels weird to me. Sort of like anti-compiling! But I guess it works.

I do like to avoid JS toolchains if I can though. Even though I am a webpack aficionado. But if you are going to have a css class for every possible style you might want to use, there is probably no other way.
> Nobody in history is immune from disaster. The world goes on. One can remember to be humble, that us humans are but a small part of nature and subject to her whims.

It's a nice sentiment to have when you aren't the one counting your formula stock and worrying how you'll take care of your 1 y.o. if shit hits the fan and there's no longer food to be found in the foreseeable future.

Taking things from perspective isn't as fun if there's a real possibility you'll end in the middle of it. Catastrophes and collapses are part of humanity's growth, but that's not going to be a consolation if your society starts disintegrating about you. Some people will survive such an event. Neither you nor me will likely be among those.
What the Firetruck?
Firefox asks you to provide the source and the instructions to get the same build you are submitting to the store.
Well, control and cost.

However, back when Apple's Infinite Loop buildings were constructed (in the early 1990s) they were mostly full-sized offices. I was told that Apple had done a cost study and determined that hard-walled offices were cheaper than cubicles in the long term because divisions were always incurring costs by re-arranging the cubical walls every few years, and you just don't do that to sheetrock.

One thing that makes open environments manageable for employees is to make the desks movable. At Valve, the desks are on wheels, and the culture is to move next to the people you are working with. Just shut down your computer, unhook power and network wires and wheel your desk over. Those little wheels make a huge difference.
What’s the change from open office if the separators are transparent?
I've always felt that the oddballs and outcasts among us are like the sentinels or vanguards of society. They detect problems before the majority and try to warn others. It's a painful and unappreciated role, exemplified by one of the major alien characters in Greg Egan's book Incandescence.
What about them restricting the visibility of a video in response to a violation of their policies is 'unethical' and 'gross'?

They also don't allow sharing porn, or for people to use the service as a CDN, is that 'unethical'?
yes, it's usable (unless you're still writing this from 2015? :). the point of the story is they're ditching stashcat in favour of Matrix.
You can cover them in posters and claw back a little privacy. :-/
Why does Weber have their own browser? Or is this one of those embedded browsers in an app? If the latter, why do they need an embedded browser in their app?
What a crock of shit that grills are now IoT devices. The less of my life that’s accessible on the Internet, the better.
Android is such a drag sometimes. Between mystery quirks like this, where I'm sure someone who has been making Android apps for 6 years will be able to explain it, and things like the absolute inability to override the order of items in the sharing panel[1], such that Android will routinely topline sharing to a contact you got one text message from three years ago.

"F.U., that's why" is the simplest conclusion I can draw. "Unpaid concept testing" is the next simplest.

1. https://cdn57.androidauthority.net/wp-content/uploads/2019/0...
How Can I Become an Internet Entrepreneur
VuePress (which generates static pages) with netlify is completely free. I can push to a branch and automatically have it deploy new posts.
> My coworker overflowed his Google Drive quota and learned that lesson the hard way.

This sounds a lot more sinister than "my coworker had to delete some files to go back under his quota".
Right. Mnemonic or not, I still get it wrong.
People have been claiming this since wipro was working out of a garage :-P Haven't seen it yet, don't really expect to see it. Top tier salaries may come down a bit, but I think salaries in lower CoL areas will go up.

There's still a shortage of tech workers, and the 'remote craze' gives workers access to more employers as well. The power dynamic is not all one sided.

(I say this as having lived/worked remotely thru the last 'off-shorting' craze...anecdata is anecdotal)
This is usually called an "area tech lead" in FAANGs and "software architect" in more old-line software companies.
This was well before he became president. There he proved that the challenges of making changes in govt, helping people survive was more than he could make politically. I've often wondered why he was such a prisoner of his political environment. In effect the extreme failure of the govt before FDR opened the way for a large political change that could do more extreme changes when FDR and the dems came to power in 1933. It kiiind of resonates with today a bit, doesn't it?
Crazy and life-changing breakthroughs?
1. Even though it is newer, distributed TimescaleDB is probably more robust and easier to operate (and already more operationally mature) than other local storage options for Prometheus metrics, in part thanks to the underlying maturity of Postgres.

2. Yes, supporting PromQL directly (ie not via remote_read) is already in internal testing. Coming very soon.

Would really appreciate feedback if/when you get to try it out yourself. Please feel free to ping me directly: ajay (at) timescale.com
What’s a Photocopier?
That's a losing battle, there's no point in fighting for the Chinese market since it's not a real market. The winner there will always be a state controlled entity until the political environment changes. But Chinese companies should absolutely be barred from doing business outside of China as their influence is toxic to democracy and freedom.

When things change, so I will change my mind.
SeL4, Nix/NixOS, and 1ML.
Adding network calls to syscalls like exec() is utterly insane. This road can lead to bricked laptops where you can't run anything to fix it (imagine an unexpected network error that the code doesn't handle properly). And crackers will just use ways to overwrite running instruction text to avoid the exec().

The comments on the article are annoying: it good that there's a mini way to reproduce, but please, use some further debugging like tcpdump (it still exists on osx, right?). Last time I summarized osx debugging was https://www.slideshare.net/brendangregg/analyzing-os-x-syste...

I'd also stress test it: generate scripts in a loop that include random numbers and execute them.
I think a lot of that's true of doctors and lawyers, too, but those are the epitome of professional-class jobs.

Maybe the difference is that we produce something that, independently, produces value after we're done. The value's in what the thing we produce keeps doing, not the work per se. Lawyer's gotta lawyer every case. Doctor's gotta treat each illness. Lawyer-AI or Doctor Bot doesn't need the developer anymore (OK maintenance or whatever, but you know what I mean). Closest a lawyer probably comes to that is writing contract templates. I can't think of anything a doctor might do along those lines, really.

In short, we build capital directly, rather than providing a service.
> It's decompiled and reassembled code and completely legal.

If it’s created by disassembling Nintendo’s code, then it is derived from that code and it infringes Nintendo’s copyright.