skysight-inc/HackerNews huggingface dataset:
Then you need to understand how they work differently and their contrasting limitations. Qubes (based on Xen) is great for desktop users to segregate applications. Xen standalone is similarly great for general server containerization.

Docker doesn't work anything remotely like a hypervisor. It doesn't provide the much greater assurance of security, scalability, isolation, resource metering, accounting, or flexibility that a hypervisor does. Docker is a security disaster and it only runs Linux. Xen/Qubes runs Windows, BSDs, or any other OS. Docker seems "easy" but with many subtle costs that come later at scale. You can't live migrate a Docker container from one host to another, where you usually can with Xen using shared storage. There are many other gotchas in the lifecycle of Docker containers that are eliminated or mitigated by using hypervisor guests instead.

flatpak and snap are basically filesystem overlays. They're gross, poorly-managed, incompatible duplications of package management.
I've contributed to flathub, so I might be biased, but what I never got about the "flatkill" rant (which was first posted like 3-4 years ago) is that flatpak has never claimed to be a security panacea. They didn't invent flatpak for the sake of security. Flatpak is fundamentally a distro-agnostic packaging mechanism and build environment with some clever abstractions to avoid static linking and encourage code reuse. Theoretically, it's also got the potential to make things more secure, but it wasn't ever billed as the main idea.

My dad was always a windows guy, but recently I got him using linux mint for some of his ham radio stuff. Flatpak and flathub are perfect for people like him. And that's good enough.
Thanks for the pointer -- not come across Clear URLs before.

https://addons.mozilla.org/en-GB/firefox/addon/clearurls/ in case anyone else has also not seen it.
That's pretty difficult, unless fixing batteries for dirt cheap (and with enough range to inter-city travel at least) becomes doable.

I can't see someone making any useful of a VW ID3 in, say, Morocco.
True, but messing with people like Greenwald, Tufekci, Taibbi, Yglesias, Sullivan etc. at the same time is bound to get Stripe into a world of hurt.

These are names with a following and they have strong incentive to stick together if anyone on Substack is threatened with financial cancellation.
I wish I had tools that were just a little smarter at working with code. There are some things that I find I have to manually track down in a large codebase, but the things I do could be automated. I'm thinking of operations like the following:

* Tell me where in package (or module) X it calls functions that can eventually reach function Y in package Z (that is, there is a possible stack trace starting in X that leads to Y.

* Recursively expand the tree of callers of this function.

* Show me where the value passed to this function are created.

* List what packages have functions that can get called when I call function X.

* Given two functions A and B, what functions can result in calls to both? (This is sort-of the greatest common denominator of possible stacks leading to A and B)

(It seems like this must surely exist, but I have yet to find it)

I also want better tools for tracing what a system does when running. For example:

* Say I have a test over some deterministic code, and I make a small change to that code. I'd like to be able to run that test before and after, and get a diff of where the computation was the same vs. where it was different.

* When debugging, I'd like to be able to ask questions about the history, like what set this field on this model to the current value? (With debuggers I've used, you have to know these questions in advance and set up things to watch - you can't ask those questions after the fact)

* List all packages that had a line of code run while running this test.

edit: formatting
Python, Ruby, JavaScript
Coworker used to have a boss who literally said where she could hear: "Lose a monkey, get a new monkey."
> A few months ago, I submitted an issue in the Gitg issue tracker. The maintainer replied to me: “Reviewing ssh feature, it is not even touched on gitg or libgit2-glib, just a dependency on libgit2, […]“.(Source)

> Although it comes with an unpatched libssh2, Gitg does not use the part that contains the vulnerability.

This conclusion is plain false. The maintainer comment he quotes only says that gitg doesn't directly use libssh2 (so they can't enforce a version constraint on it), not that it doesn't use it all. It's very likely that gitg does actually use the vulnerable libssh2 if you use it to clone a repository over SSH (which it can do).
"the problem of how to more evenly distribute income among creators to achieve a greater number of living wages."

It's delusional of the author to think that is a goal what YouTube is aiming for.
Presumably different audiences will prefer different writers, as they always have.
Look at the cadaver studies.
Zig's safety is not at all like C's (or even C++'s), even with static analysers and sanitisers. It is core to the language through things like slices and nullability types. What Zig brings to the table is an extremely powerful and expressive, yet remarkably simple language that places as much emphasis on correctness as Rust (albeit in a radically different way).
Isn't it also sort of useful information for site owners even if they are not maliciously slurping your private information?

For example you might not know that important site X linked to you and is driving Y% of your audience. You are not necessarily interested in the individuals following the links when you discover that.
As someone involved in modified cars, these are very different things. There's only 1 real way to change your brakes. It's like LEGO, except with a couple of bolts and some metal pads.

Adding a turbo increases power (or fuel economy) but isn't going to cause your car to accelerate on it's own. Or lockup steering. Or push timing and blow holes in your engine sidewall. All that stuff is computer controlled in modern cars, and you bet your ass you can cause some extremely catastrophic failures just with poorly implemented software.
Their permissive approach to free-speech one of the things that keeps me with them (there are other reasons as well - the service is pretty good, though I've been so comfortable them for the past decade or so I haven't even looked into price comparisons with other services). Long may their service continue to hang about!

While I host some sites via github, for potentially sketchy/objectionable websites where I want to give them the best chance of continuing to exist long-term even should some people object, I've used NFS. Are there any better/comparable options that aren't too onerous workload-wise?
Well we are talking more about financial success, right? Or that was my impression from the debate. Even the original article revolves around $$$.
I've never seen an ECU you couldn't tune with a laptop. It's a hell of a lot easier to dial in a modern engine than it was when you had to try to find the best combination of jets, needles, and springs.
I like not having to get up and walk across my house to reset the internet because my ISPs modem is garbage and locks up under heavy load.

I like being able to schedule my plant's grow lights to get the appropriate amount of light regardless of season and being able to keep that schedule even when i'm not home

I like knowing that I left my garage door wide open as I drove away because I forgot to look back over my shoulder to see that the button in my car didn't get picked up.

I like being able to unlock the door for my neighbor to let my dogs out if I end up stranded at work longer than I had intended to when I left that morning.

I like that my garage camera turns on and takes shots of whoever is entering though the door when its opened.

I like that my system texts me if a door/window is opened after 10pm (if its me? no biggy. If its an intruder? BIG HELP)

I like that these devices are on a segregated VLAN with firewalling protecting my personal computers/NAS

---

There's a lot of negativity to be said about smart devices, but you can't focus solely on the negativity while ignoring the advantages.

There's also a level of risk and comfort each individual should be willing to set for themselves. I don't 100% trust my garage automation, that's why I have monitored security on my house. I'm not willing to automate devices that can harm my house (oven as your example) but I am willing to monitor their power state (is the oven on?)

This isn't all or nothing in the end.
re: decaying grass, it's a question of speed and cycles.

All plants eventually decompose, but it happens at a much slower cycle than if we actively harvest it, feed it as grain, grow more where the original harvest was, etc. By speeding up the cycle, we end up with much more of it. Or at least that's my non-scientist take.

We gotta remember that "greenhouse gases" aren't a bad thing. They're fundamental to making Earth hospitable for life. But there's a balance. When we speed up the "carbon cycle", we end up with too much of the stuff, which throws the whole system out of balance. But we could just as easily end up with too little some day in the future, which would cause us all sorts of other problems.

As for whether we have truly accurate numbers for any of this, I too am skeptical. But it's early days for research in this area. One or two studies doesn't cut it, but that doesn't mean they're not onto something huge.
As a longtime vim user, I don't see how vim makes going to the Nth logical column (for several values of N in different rows) in a large "CSV-like" file much easier.

Navigating in general is easier, sure, but... do you have a trick to share perhaps?
Same experience.

macOS Catalina

Firefox and Chrome
The issue i have with metaprogramming (lisp or elixir but also C++ macro) is that it is easy to forget, unlike most programming principle. It require you to twist your mind, and if you stop for two-three years, it require efforts to put your head back in that space.
To me it always seemed a bit similar to justifications used for the "peculiar institution" - the system can't exist without slavery, therefore slavery must exist. The benefits of cheaper labor was well appreciated; Carnegie called immigration "the golden stream which flows into the country every year."[1]

[1]https://www.ebooksread.com/authors-eng/andrew-carnegie/trium...
I guess my questions are:

- Does it have to appeal to "MOST" people for it to be a viable dividends-paying business?

- Does it have to be the "landing page / YouTube of articles" in order to be a viable dividends-paying business?
The A16Z Marketplace 100: 2021
The issue with "documentation" is there are never enough resources devoted to it at most companies. When given a schedule it only covers the main project goal(s) and no time for documentation or refactoring or any quality of life improvements.

Significant documentation is also not something easily written in slack time. With any non-trivial project good documentation is a full time effort. It also needs to be updated as the project evolves lest it become out of date and incongruous with the behavior of the system.

There's dreams of in-line documentation but that's only going to cover individual methods and classes and not necessarily whole modules or major subsystems of a project. It's also not going to necessarily cover in-line documentation from other parts of a project in different languages e.g. comments in config files.

There's lots of technical ways to help documentation but there's no replacement for documentation being a high level project goal with resources allotted to it.
>I reckon that if I were in law enforcement, the fact that there is absolutely nothing I can infer from these filenames, combined with the obvious complexity associated with correctly maintaining something like this, would actually make me that much more interested in decrypting this information simply to take a look at it and rule it out.

If I ever did something shady, I'd absolutely make a ton of honeypots like this.
We can make our own. PyImageSearch blog does this all the time.
If you run a white nationalist site, you probably know people will dislike you without needing to be explicitly told.
JSON-RPC 2.0
The Rise and Fall of Early Evolutionist Father Zahm
I got a cheap chinese interface and modified the software so it works for me.

It all depends on how much effort you’re willing to invest
Not just DNS, it was their entire Active Directory Global Catalog. If it weren't for that server, they would have needed to re-create their entire user database, all of their endpoint & server management policies, and it would have been almost impossible to safely restore their Exchange email database. They got very very lucky.
I wouldn't be surprised that by the time I buy a projector, they're all "smart".
Recent Javas made many QoL improvements to remove some of the complaints IMO. And there are more neat improvements coming (already there?) with 15 and 17.
California’s New Idea for Homes at Risk from Rising Seas: Buy, Rent, Retreat
This is my philosophy:

Data types are object-oriented. They are responsible for ensuring that their internal state is consistent, and nothing more. They may inherit if it makes sense, but it usually doesn't and most of the time aggregation is more appropriate.

Business rules are functional. There's just a bag of composable, pure functions that take the various data types and perform validations, transformations, etc.

External services, such as a database, are contractual. This would be an interface in Java or C# defining the required operations of the service. This allows manipulation of these external services during testing. Unit testing would mock them; integration testing would not.

Workflows or services are procedural. They combine everything else into an actual use-case. They read in a linear flow of what needs to happen when to meet the use-case.
Substack themselves have a ToS. In theory Substack could always switch payment processors or allow crypto currency payment, but you can never get out from under their ToS.

For example, you couldn't publish something like 2600 there because they discuss illegal activities like blue boxing.
Yes, here's mine at https://world.hey.com/daedalus

Very simple. Although I still haven't found out how to embed links into text.
> European politicians have been attacking the AZ vaccine because it originates from the UK and they are ideologically blinded by hatred of Brexit.

There was a good piece in the Irish Times this weekend if you fancy a less UK-centric view on this. The view you've expressed above seems to be the only one I read among the British press/commentariat. Perhaps it is the UK that is blinded?

https://www.irishtimes.com/opinion/brexit-blinds-britain-to-...

"The Oxford/AstraZeneca team managed an extraordinary feat – producing a safe and effective vaccine against a novel coronavirus within a few months. Yet time and again, AstraZeneca has undermined its own efforts with communication blunders, a lack of transparency and a consistent record of overestimating its own capacity to deliver."
Stallman was talking about actual children.[1]

[1] https://stallman.org/notes/2019-jan-apr.html#25_April_2019_(...
AI Weekly Update (March 22nd, 2021)
Labor-friendly laws promote local economic growth
In the end, someone has to choose who “morons” are. I was born in Yugoslavia where communist government protected its citizens against “external and internal enemies”. Many “internal enemies” were identified and sent to work in labor camps. The enmity of these enemies was telling jokes abot the ruling class.
There's a difference between a value being null, and a pointer being null. While Rust disallows both, it handles the cases differently; for the latter, a Rust program containing only safe Rust cannot create "null" references. However, for a "nullable" type, Rust encourages using `Option`, and forces you to handle the `null`/`None` case via a check.
While discussing applications that are advertised by Flatpak's application metadata as sandboxed: "Allowing access to the host file system does not give the application full reign over your system."

The Flatpak documentation he then links to contradicts his rather controversial idea that a sandboxed application have access to the host file system.

"With Flatpak, each application is built and run in an isolated environment, which is called the ‘sandbox’. Each sandbox contains an application and its runtime. By default, the application can only access the contents of its sandbox. Access to user files, network, graphics sockets, subsystems on the bus and devices have to be explicitly granted. Access to other things, such as other processes, is deliberately not possible."
SARS-CoV-2 circulated undetected months before first Covid-19 cases in Wuhan
> So as it currently stands I have no idea what those modules are and what am I loading? vim25? Is that the text editor vim?

Take any of these imports, append it to https://godoc.org/, and see.

For example, github.com/vmware/govmomi/ becomes http://godoc.org/github.com/vmware/govmomi/ , which tells you:

govmovi: A Go library for interacting with VMware vSphere APIs (ESXi and/or vCenter).

Everything underneath govmovi is subpackages of it, so `find`, `view`, `vim25/mo`, and `vim25/types` are all govmovi packages. You can also visit them on godoc to read documentation, if the code authors followed documentation best practices.

These are imports like in any other language. They are, however, nearly always based on a global URL, and thus have a godoc page that you can visit and read the docs for immediately. They are also always qualified, so if you wanna find all all uses of govmovi/vim25/mo, just C-f for "mo." in your codebase. No `from foo import *` equivalent exists in Go, which is one of my favourite features of this language.
Took me a moment to get the joke, pretty clever title.
In the Latin Quarter, Paris’s Intellectual Heartbeat Grows Fainter
At the end of the day, the capacity of the grid has to be such that you can deal with the worst case situation. So the grid has to handle the case where it is cold and your solar panels are off line.

This means that your neighbor would still have to pay for the grid even if they would directly get electricity from you.
What I was getting at was more the fact that even if you record 3 hours of stuff, you don't need to put the unedited 3 hours out. It can be recorded on a potato microphone on a clay disk for all I care, just spend some time in the edit and cut it down to a manageable size.

There are very few podcasts that can stay on topic and interesting past the 1 - 1.5 hour mark.

The only exception to this rule are the Christopher McQuarrie Spoiler Special episodes of the Empire Podcast (now behind a firewall). The dude can keep spewing fascinating stuff about his movies longer than the movies' combined runtime =)
The author sounds extremely defensive, either ship a decent product or don't. If it becomes something where getting exceptions for sandboxing are so absolutely difficult most people skip it all together and ask for full access, you might as well just install directly from apt.

I also hate snaps, apt get install whatever you need, and be done with it.
Germany is a comparatively small market. Engineers should not be forced to design to the lowest denominator. If anything Germany should be left behind to incentivize changing German regulations.

Regulations should enforce values with clear benefits. If the benefits are not clear then regulation is simply a barrier for entry instead.
You should be a Boeing consultant ...
I see that the technology world got in love with GoLang lately. In the Software House I work we get tons of questions, can we build an app in Go (yes, we can).

Is this the Google authority that gets people so eager, to use this specific programming language? And I'm talking about entrepreneurs who know ZERO about app development - yet, they insist to develop their app in Go. Even though most of the time, it would be easier for us to do it in Ruby on Rails we agree to do it in GO. Is this the trust matter of why GO has got such a great PR lately?

Nevertheless, dear developers: learn it, because from the business side I see its potential may only rising as it did with other backed by huge corporations languages (Flutter, React Native).

PS. Interested in GO benefits written from the business perspective? Check them here: https://blog.railwaymen.org/why-use-golang-to-build-your-bus...
Show HN: Mobile UX Design: Definition, Tips, and More
I did Scala for ten years and've been at it with F# for a year and a half now. I do miss some very powerful features of Scala such as HKT and "typeclasses" occasionally but overall it works very well.

Sure, Scala is complex but I find that there are a few misunderstandings here.

Java, for instance, _requires_ that you use a number of supporting tools for it to be useful these days. You need a container, you need quite extensive testing and you need quite the advanced build tools. Sure, these have all been around long enough these days to not be what we think about when we compare Java to other things, but they're implicitly also Java. I can't speak for Go because I've not looked at it.

But Scala has strengths that means that you don't need to have _external_ tools and libraries for those things. That strength is types which means that the compilers is going to want to "pick a fight" with you to a very much higher frequency. That is a pain. The reason that we're here talking about that pain with Scala is that you don't think about that in your Java project anymore because you use heuristics and sandy heads instead.

Another thing is that I think that Scala gives you a big fat revolver to shoot yourself in the foot with. Java has a bb-gun so no matter where you aim it, you're not going to accomplish a lot.

Over to F#:
I'm going to claim that the .NET toolchain is superior to the JVM ones. The CLI tools and paket runs circles around the POS that is SBT.
How many people will actually pay $120/year though. I pay in that ballpark for the NYT and The Economist. But it seems borderline nuts to pay that for a single author's newsletter unless they're delivering unique insights that I can turn into a lot more money than that. Or maybe is they do a really good job of covering a niche hobby although that's still almost certainly more than a niche hobby magazine would charge.
I don't think you can say that Zig is as correct as Rust given that memory-safety is not guaranteed by Zig (as evidenced by the article we're commenting on).
Yeah this is so far from pwning that it’s hilarious to be presented as such. This is literally authorized access. He built an integration for his smart bulbs the same way Google Home or HomeKit would access it but with some weird Wi-Fi paranoia that actually made him less secure.

The security model of pretty much all smart lighting "if you can reach me on the network you're trusted" just like the security of light switches "if you can reach the switch you can flip it."
A Sitecore Upgrade Devlog – Part I
Not applicable to parquet, but I have used zless/zgrep often on tar.gz-compressed logs.

(I'm not sure what they're doing is actually that efficient though...)