skysight-inc/HackerNews huggingface dataset:
> Do not store secrets in environment variables

Yes, definitely don't put secrets in the Dockerfile itself. I'm curious if there are reasons not to use a .env file though?

> Only use trusted base images

This is a good sentiment, but docker hub also has plenty of images that are built directly from a github repo. You can inspect the Dockerfile and (as long as you trust Docker) trust that it was built as written. In this case I recommend pinning to a specific container SHA (image_name@sha256:...) in case the source repo gets compromised. For official images, you can pin to a tag IMO.

> Do not use ‘latest’ tag for base image

Regardless of the security concerns, pinning to latest will probably bite you when there's a major version bump (or even maybe a minor one). Imagine you built a container on ubuntu:latest when latest was 20.04 and some new employee gets hit with 22.04. That's a bad surprise.

> Avoid curl bashing

Evergreen fight here, but I agree with the author that you should at least validate checksums on external files before executing or using them.

> Do not upgrade your system packages

This is where the throne of lies about Docker idempotency crumbles. You have to apt-get update because Debian/Ubuntu repositories remove old versions when there are security fixes (not 100% sure on this, feel free to correct me). So if the ubuntu:20.04 image is released and there's a security update in openssh-client, running "apt-get install openssh-client" without "apt-get update" will fail. So we all run "apt-get update" and pretend that the containers we build are time-invariant. They're not, and in fact we occasionally get security updates snuck in there. Luckily Debian and Ubuntu do a good job not breaking things and no one complains. But if you build a container on Tuesday it's not guaranteed to be the same as on Wednesday and there's nothing you can do about that with a Debian distro. But it's actually fine in practice so we pretend not to notice. The point about not running "apt-get upgrade" is kind of moot - you're going to effectively be upgrading whatever you "apt-get install", so it's probably worth taking the same trade on the built-in packages.

Importantly, there's no security risk - just a configuration one.

> Do not use ADD if possible

Same as above - you should be checksumming external dependencies or self-hosting them.

> Do not root

> Do not sudo

I haven't thought deeply about these. I'd prefer to trust the container system isolation rather than playing with users and permissions. I don't understand this risk well enough to have a well-formed opinion.
4500-6000 °C
The pandemic is fueling digital repression worldwide
I basically agree with your sentiment, but that's where politics (literally- persuading enough fellow citizens or legislators to your point of view) comes in. People think politics is this dirty, awful business, but it determines the legality or illegality of these kinds of programs. If you want to effectively advocate for change, you have to play the political system.

And, telling the general public that PRISM isn't effective has a decent shot at getting these practices outlawed. Telling the general public 'sure, a few terrorists will get through here and there, but that's the price of living in freedom' is pretty much guaranteed to get you the opposite result. You have to focus on effective persuasion, and regular people won't/can't think about hard tradeoffs
This material only appeared in the last 10 years as a practical way of creating strong magnetic fields. Give it enough time and you'll see most MRIs transition away from the large hulking behemoth machines that we have today into much smaller and more portable machines. Also, as an added benefit you can use liquid nitrogen to cool them instead of helium.
Over engineering at it’s finest
Because he prevented it!
I'm still heart-broken about Santa Clarita Diet. First season was good, second and third seasons were absolutely brilliant. And then it was cancelled on a cliff-hangar.
On a related note, Steam has been getting away with this for well over a decade.
Even with all their metrics, all they can do is guess. Their revenue comes from subscriptions, and there is no clear correlation between the amount of views an individual show gets and the amount of subscriptions Netflix has. You can't simply say "obviously a show with more immediate viewers brings in more subscriptions."

A show with fewer viewers might attract hardcore fans who will cancel their subscription if the show is cancelled, while one that's much more popular might attract viewers who will stay on the platform either way. Someone might be less likely to continue their subscription because of these kinds of cancellations, even when they didn't get around to watching the shows before they were cancelled. A show might attract fewer viewers at first, but become a cult classic later (Netflix should know this, they purchased shows like Arrested Development), or take a few years to really hit their stride.
If this is a surprise to you, scan your servers and see what else has helpful behavior which you didn’t expect. Services like shodan.io will even do this regularly and email you when things change.

It’s easy to blame Docker but I’ve seen this failure mode happen many times over the years - even experienced admins make mistakes. As always, defense in depth and continuous monitoring trumps raging about software.
This seems relatively well written, but I consider the cost analysis worse than a dead fish handshake. It's just plain facile to explain in one sentence that it took two years of development to bring an internal tool into service, and then in another suggest that it is cost effective without any kind of rational assignment of figures; as well without comparison of the same environment without the tool.
I don't consider people lowly, I merely think that the debate over veracity of a fact on Wikipedia is better left to the moderators of Wikipedia than it is to have a debate.

In terms of my own contributions, I've been doing so for years. I've even started major pages going back as far as 2004 when they were missing. I didn't know anything about this specific topic so I didn't feel comfortable proffering an edit.
My both attempts at PRNGs resulted in rather short cycles -- ones that were easily compressed several-times-fold by GZIP and similar algorithms. Thus I consider them to have been trivially reducible.

Yes, a well designed PRNG algorithm and implementation can be quite simple, but it is quite hard to design them well. It takes either non-trivial math, or non-trivial amount of iterative improvements.
The tweet discussed in https://news.ycombinator.com/item?id=24778053
> There is no good way to A/B test how cancellations affect signups.

Not really an A/B test, but you can certainly from internal data see how individual viewership of cancelled shows (or even break it down to shows cancelled with and without closure, if you take the effort to have someone code shows for that) correlates with downstream retention.

For the reputational stuff, I'd be very surprised if they are not using one or more of the consumer survey services to track that and the role decisions like cancelling series in general or in particular play into it.
I wasn't familiar with the state facilities. I'll definitely check them out.

Moving from here to there is just, well, daunting to say the least.
That was after configuring HUGO on localhost and customizing its theme.
And why do kids do that? Either because school is miserable and/or because saying hello to a friend isn't a moral travesty
If I understand correctly, ALGOL had better ways of structuring code into functions than FORTRAN did. This let ALGOL do what eventually was called "structured programming", and FORTRAN do what was called "plate of spaghetti" programming.

This is not the same as saying that EWD thought that ALGOL was good...
The current has some limits, but with enough copper you can probably put some serious amperage on it, and a superconductive magnet in "persistent mode" can apparently keep going for months. Not sure how I'd feel about several MWh in a single circuit though.

It might be easier to just build a big flywheel.
> This page doesn't exist

> At least not in this universe.

Good one. Did they take it down?

Edit: looks to be back now.
That's unlucky, I'm guessing you haven't played much of it?

Just playing the GTAV VR mod (https://github.com/LukeRoss00/gta5-real-mod) is just something else, whilst not perfect (hell it's a mod on an old game!) it's so fucking sick being in a car chase at 160mph weaving through traffic in VR.

Can VR get a lot better in 5 - 10 years, hell yea, but that's like saying you weren't going to buy an Xbox360 because the Xbox OneX will be out in 10 years.
Thank you, we hope so too! Yes, we are planning on using sleep data from wearables or one's phone as well given many of our clinicians have requested it. It would be very interesting to see how that correlates to specific mental health conditions
Selection is for physical capabilities (experienced coaches are actually looking at both parents in addition to child assessment). Stress tolerance is built up gradually as a side effect.
Thank you for going through with this. Once this saga is at an end, I'd love to see the whole thing written up as a blog post.
I've been an amateur filmmaker for awhile - it's one of my biggest hobbies. I'm working on a startup in the streaming space that I think innovates in a competitive way.

I'm still working out the kinks for our first "film", and I'm going to approach investors once we've released it. I think it's pretty novel and not something these companies will touch before it becomes a threat. But it very much should put fear into them as it changes the business.

Are there any of you that are extremely passionate about film, emotion, story, character, setting, aesthetic? Do you think the current slate of productions by Netflix and Disney mostly suck? Do you like Miyazaki? If that speaks to you we should get in touch at some point. Leave me a comment and I'll reach out when I'm ready.

As "proof" I'm not just blowing steam, my last big project (not a startup): https://vo.codes
A well behaving reverse proxy or load balancer would not cause security issues. The header contains both 'for' and 'by' parameters. If they are properly filled by the proxies, then it's not a security issue.

source: author of django-forwarded middleware, finds client IP from XFF header.
I don't have a response for you because you're probably dug in, but anyone reading this please consider that it's riddled with misinformation.
Oxford lectures on the philosophy of mathematics available online
Unfortunately, an increasing number of providers are prohibiting VoIP numbers
It's two spaces. Of course four will work as well, it just adds extra indentation.
Perhaps. I'm surprised that article doesn't mention radiation. You're right of course that radiation-hardened chips are a very specialist area. Not often you can charge hundreds of thousands of dollars for a single CPU chip running at 200MHz or less.

https://en.wikipedia.org/wiki/RAD750
On the github page "Oh no! A hit a bug!" - Should that be "I hit a bug!"?
> The USA is technically not a democracy and is instead a representative republic which is a fact. [...] live in a gerrymandered district so my representative is decided for me ahead of time.

In what way is your republic "representative" then?
Most software engineering positions don't require much hardware knowledge. If you're developing embedded software, you will have to know a little bit more about hardware. If you plan on developing hardware, you'll need a solid background in EE.
How is abandoning your life and home the "easy" way? Sure, it takes means but it's nontrivial. And yes, many are left behind but should we all be forced to stay on a sinking ship, when there are lifeboats? If anyone must perish, we all must perish? I'm headed toward the exit with my family. It's a long process and if I didn't have a kid, I probably wouldn't be doing it. My kid's life is more important than mine and I'll leave everyone behind for them. It's not easy but it's important.
Ask HN: Alternative Client for MS Teams?
Hi everyone!
I have to deal daily with Microsoft Teams, and it's the slowest software on my PC. I'm running it on Linux (unofficial client, [0]) because the original client is far worse.

Am I the only one that feels the necessity of replacing the client with an open source alternative that is not as bloated as the software provided by Microsoft? Is somebody working on the side to create an alternative client? I would love to contribute.

[0]: https://github.com/IsmaelMartinez/teams-for-linux
It may well be common knowledge now. I discovered it when writing our Dockerfiles earlier this year and before that hadn't seen it. It looks like multi-stage builds were added to the best practices in 2018 [https://github.com/docker/docker.github.io/blob/master/devel...] which is probably why I missed it before
Just curious, how are you handling the legality if at all :)
Are "popularity contests" considered sweepstakes or lotteries?
They're running right at the limits of what is possible.

One easy way to see this: these effects only appear at highest pressures, and I believe that the diamond anvil breaking strength isn't terribly consistent (one defect or error in sample-preparation? poof. Got a good one? You can go farther.). I wouldn't be surprised if each promising iteration of the experiment is performed by loading the anvil all the way to failure.

They're working in the dark -- nobody knows for sure how much pressure is enough to yield the next step forward in knowledge.

If the stars align, a single run of such an experiment is sufficient to yield a quantum leap (sorry) in condensed-matter physics. As an example, this particular iteration may prove career-defining for those involved.

That said, if they're constrained on budget, I suspect they think really hard about the way to optimize discovery potential within their diamond-anvil supply constraints.
Strongly agreed.

Some people seem to believe Internet is the new electricity. Even if this is so, electricity doesn't have colour - only voltage, amperage and frequency. My toaster doesn't restrict me to use only electricity from a specific power plant. I can power it up even from a car battery, if I tinker with it a little. Similarly, a device like the Dash button should use whatever endpoint that implements the required API, and not be restricted to a specific provider.
The K.Top: 18,000 digitised maps and views released
Creating Hallucinations Without Any Drugs Is Surprisingly Easy
Not really even in purgatory, I'd say. The FDA doesn't recognize the general concept of aging as something for which you could be treated, so there's no approval process they could go through in the first place.
Part of the issue is that people pay for an algorithmic recommendation streaming service. Prior to Netflix streaming offering, people searched and chose movies to watch in the mail based off recommendations from their social circles. When there is no discovery option, Netflix is forced to "guess" what it's customers want rather than know. They've completely removed the social aspect of enjoying shows to the point where people say "have you seen x?" "yes" and that's the end of the conversation.
This is a very difficult question. We know somewhat his preferences, because he worked on implementing ALGOL 60 [0][1], but unfortunately we are blocked by a bit of incommensurability; in that time, garbage collection was not something that could be taken for granted. As a result, what he might have built in our era is hard to imagine.

That said, he did have relatively nice things to say about Haskell [2] and preferred Haskell to Java:

> Finally, in the specific comparison of Haskell versus Java, Haskell, though not perfect, is of a quality that is several orders of magnitude higher than Java, which is a mess (and needed an extensive advertizing campaign and aggressive salesmanship for its commercial acceptance).

I imagine that he would have liked something structured, equational, declarative, and modular; he would have wanted to treat programs as mathematical objects, as he says in [2]. Beyond that, though, we'll never know. He left some predictions like [3] but they are vague.

[0] https://en.wikipedia.org/wiki/ALGOL_60

[1] https://www.cs.utexas.edu/users/EWD/MCReps/MR35.PDF

[2] https://www.cs.utexas.edu/users/EWD/transcriptions/OtherDocs...

[3] https://www.cs.utexas.edu/users/EWD/transcriptions/EWD12xx/E...
Your flame-bait revision is a perfect demonstration of what's wrong with the original post.
I love this quote: "There are only two kinds of languages: the ones people complain about and the ones nobody uses". Bjarne Stroustrup.
Thanks for your help. Could you tell me what choices you made that have made it better for you?
More like 900 USD if you want to use it the way it was meant to be used with the peripherals.
I don't know if I'm the outlier here, but gamification did nothing but harm in my life, I'm scared of being sucked into anything gamified :'(

It brought out the worst in me to try to maximize "points" and it made me hostile towards people I feel threatened by (people rising in points towards me) and then it brings out an unhealthy zeal to accumulate more points until I burn out.
Just started reading this and it's refreshing to see a highly practical take on resumes, written by people who actually read and make decisions on them. As a former hiring manager, I've found myself nodding my head A LOT so far.
Zoom Rolling Out End-to-End Encryption Offering
> That's rather the norm for shows; cancellation is a business decision, not a story decision.

But if the series wasn't so long, each series would be commissioned as a whole and production in the can. That might not protect against unresolved cliffhangers, but it does mean you don't lose a story mid broadcast.
If you're used to exclusively programming with line numbers and you're a kid, sure, it might take a little bit of time and instruction to comprehend that line numbers aren't necessary. But from what he wrote it just sounds like this guy is whining about (when faced with students like this) having to actually do his job.
I always thought `:latest` was a bit of a special case. Ex: Pushing `2.0.1` followed by `1.1.4` would leave `1.1.4` as the `latest` image which could be an issue by itself. Is that wrong?

I've always tried to pick stable tags [1] if they're available.

1. https://docs.microsoft.com/en-us/archive/blogs/stevelasker/d...
The distribution is important.

If 100% of users are experiencing 0.01% random errors it probably isn't worth bothering about.

If 0.01% of users are experiencing 100% errors than it is much more important.
https://youtu.be/F_IsBD6E3O4?t=801

13:21 in the video clearly shows that Snapdragon 865 already at 15 TOPS while A14 only has 11 TOPS

how is that skepticism?
Well, that part of Google is less trustworthy, that is true. One reason I keep an orthogonal backup system that isn't Google.
Energy storage would be pretty useful, the efficiency could be even better than batteries:
https://en.wikipedia.org/wiki/Superconducting_magnetic_energ...
Show HN: iOS14 weather (METAR) widgets for pilots
Just swap the mine with any randomly chosen empty tile, no need to regenerate the board.
If you feel that way, consider sending an email to jeff@amazon.com .
> This is a declaration where the value of --foo is literally one space character.

I don't know if this is technically accurate though it leads to the same result. Whitespace in such languages is generally ignored - I believe this would just result in an empty property under the hood.

EDIT: also why the off-kilter background shapes for the code blocks. It made me dizzy reading the article.
These are similar kinds of non-falsifiable claims that many authoritarian or the like use.

* The stock is down 25% this year with our $100M/yr CEO, but think of how bad it would have been without them

* We need tough on crime policies because unreported crimes are on the rise

* Tough on crime policies deterred all the decline in crimerate

* The king is good because we didnt get invaded since he sat on the throne
The problem isn't that Netflix cancels shows after 1 or 2 seasons. It's that they insist on injecting mystery box plotlines and ending seasons without resolving some of them. They do this to keep you bingeing, but the end result is a lot of annoyed fans who put in the time and invest in the show without any resolution.

Instead of they shift to a one-and-done model with room for more seasons, then it wouldn't matter.

Now Netflix has a vast library of content, yay for them, but full of half unfinished stories. Imagine going to the library with the back half of the books missing. Would you want to read the first half of the book?
Totally agree and your chances of actually make the 100s must be minutely small
why don't people go to jail for things like this?
Could this also be used for evil? To deliver malware or other similar dangerous link that could be delivered in an email etc?
Sure not a great example, but fire two bowling balls at eachother and fire two feathers at eachother at equal speeds, how big do you expect the debris fields to be in either case?

The bowling ball collision has a lot more energy involved, it can eject more debris at high velocities in various directions.
Oh yes Yahoo Games! I used to play Pool and Chess for long hours. Didn't mention it because I mostly played from within Messenger.
> "He calls out BASIC specifically because it was ubiquitous and often the only option on the machines novices would have available at the time."

EWD's quote is from 1975 which is just barely the start of the microcomputer era (the Altair 8800 came out in '75 and the Apple II in '77), so he's not referring to those. Most people writing programs would have had access to mainframes and therefore had access to multiple language interpreters and compilers I would think.
Hmm, I was thinking setting up your own personal cdn meant creating something from scratch. But this is just a how-to for setting up Cloudflare cdn.
Some base images do, but some don’t, and they update on their schedule rather than yours. Doing the update on your schedule is trivial, has no meaningful downside, and means it’s done and tested as quickly as you need.
> It had machine-precision with firearms

Mostly this. Star wars droids don't have machine precision. They don't 360 no scope everyone in a room and easily win 10:1 battles without taking any cover. The bounty hunter droid is far more competent than any human in a fight in this series, which feels wrong given these mandalorians are supposed to be legendary bounty hunters or something.

I'm sure someone's ready to jump in with extended universe stuff to prove me wrong, but let's caveat that by noting Luke nullifies black holes in that series, so the similarities between power levels are hardly apples to apples

https://www.youtube.com/watch?v=OMQUTOh_AsQ
I imagine he had at least some fondness for Algol 60 since he is co-credited with writing the first compiler for it.
Is Pied Piper project from Silicon Valley is for real or anyone working on it?
I dont think I have what it takes to play the game.

I do not mind to work hard though. Not long hours but hard and smart is no problem. Unfortunately I don’t think that’s enough. Most people around me are constantly working on looking good, doing the job is only secondary.
http://www.piedpiper.com/ is website what i have found.
Does anyone actually created a solution?
It's also super interesting for engineering reasons:

- Maglev trains can be built at much lower cost

- Other levitating transportation via the Meissner effect

- Quantum computing

- Entertainment, theme parks

Lots of things I can think of.
So, after 5 years you can just do something stupid to get banned and get a full refund? Sweet.

Ensuring it can be used without an online account is actually reasonable.
Showcasing the importance of secure defaults with a PyYAML 0day