skysight-inc/HackerNews huggingface dataset:
Microsoft says the answer is “no”. https://devblogs.microsoft.com/dotnet/porting-to-net-core/ scroll to “App Domains” and “Sandboxing” sections.

Personally, I would still consider it. For a game, the risks are not that large, it’s not a bank nor a nuclear silo.

You can use Mono.Cecil library to reflect assemblies without loading them as code or executing any parts of them. You gonna need to whitelist allowed imports (allow stuff like String/List/Dictionary but not much else), blacklist pointer types everywhere (function arguments, return values, and locals variables, CIL+metadata do have types of things), blacklist DllImportAttribute, and probably a few other things I forgot.

The performance should be awesome that way, however security-wise that’s not 100% failsafe. Also easy to DoS your server by consuming too much CPU or using all the memory. You might need workarounds to address these issues. Mono.Cecil can patch code making new assemblies, not just inspect/reflect.

Probably for these reasons MS discontinued app domains / code security, and recommends processes, containers or virtual machines instead. You can run another instance of .NET runtime inside these things, the startup/warmup time is not that bad, it's not a Java.

P.S. If you only allow to edit code in your editor i.e. don’t need support for visual studio + Microsoft’s compiler, you can make your own language where only safe things are expressible, and compile that one into CIL. Simplifies many things, you only need to worry about CPU time and RAM usage. You don’t need to emit DLLs nor mess with CIL directly, can compile scripts into delegates using System.Linq.Expressions or probably some third-party libraries.
Thank you for posting this.

I was very interested in this. There's no way I'm using it now. I'll never trust anything from Mattermost.

Maybe it still counts as open source but with this, plus their complex licensing, I feel it runs very counter to what the FOSS community actually wants
I've used the canary tokens and they are probably the most elegant security tool I've seen in the business. What a pleasure to read.
Symbian folks inside Nokia at the time lived in a reality distortion field. Your experience is not the only instance where the Symbian division inside the company railroaded the Maemo project, which they saw first and foremost as a threat to their jobs and political dominance. As TFA notes, N900 was preceded by N770, N800, and N810 "internet tablets". N810 in particular was basically the same device as N900, but despite having otherwise state of the art wireless communication tech all of them lacked one very crucial component: a mobile data modem. Internet connection was only possible over WiFi (or even RJ45-USB dongle) but not SIM.

The reason for this was of course not technical - the Symbian folks inside Nokia simply managed to convince the executive level management that adding mobile data would turn these devices from PDAs to a smartphones, and it would be very ill-advisable to launch a competing smartphone platform to Symbian.

When Maemo folks finally got a chance to "give us a try" (and I guess management saw with the competition that they needed something more modern), the result was N900. Considering it was meant as a "niche" device its sales exceeded all projections. However, in the grand scheme of things it was just an experiment designed to fail and further cement the dominance of Symbian.

I think Nokia also developed a fully-working tablet around either Maemo or MeeGo. It was literally ready to ship, but was at last minute cancelled before the launch event due to backroom dealing again by the Symbian folks.

It has all been documented in the book "Operation Elop", which paints a pretty good picture about everything that went on behind the scenes during the demise of the once great Nokia: https://asokan.org/operation-elop/ The book is based around absolutely exclusive interviews of people who served in Nokia's board and top executive positions at the time.
At least the added complexity will result in faster compile times.

(jk in a sad way though)
That was true of film photography and development too
Thanks, that seems to align with what I understand too. But I thought perhaps a new architecture, like M1, would have had some additional protection.
Yeah, I came here to call this out. Speaking from the perspective of having also unironically sought to use Kubernetes for personal projects, the options I found available were these:

- Expensive in money: Pay Amazon or Google on the order of $100 a month for reasonably reliable managed k8s, with the option always available of a goofed deployment increasing your bill by an order of magnitude

- Expensive in time and money: Set up and run your own k8s cluster, at a monthly VM hosting cost not too far from what you'd pay a managed k8s provider, and spend a ton of time dealing with 100% of the ops burden

It's a shame. I use Kubernetes at work and I like it a lot, because it does a great deal to make complex tasks simple. It would be really nice to have that same kind of fungible resource pool available for personal stuff too, and be able to just knock out a few lines of YAML and deploy a new project and have the orchestrator take it from there to running without any further effort on my part. But the economics just don't seem to be there.

(I did try DO's managed k8s service, which is considerably cheaper than the big players. It was also very new, and very flaky - not a knock on DO, it's reasonable that a new kind of service would have some teething problems. This was also a year ago, so I wouldn't be surprised if they've gotten it considerably more stable since then.)
I can't help you with the term you're looking for, but as far as seals are concerned, they're genetically very close to dogs. I'd expect similar behaviors.
Thanks for the shoutout Abhinaya! Glad to have you as our user.
Hmm. This sounds like my workflow with gerrit, which goes like this:

- each work item has its own branch. When pushed, gerrit turns this into a review.

- a git alias, "alias.fixlast=commit -a --amend --no-edit" which amends the last commit to match the working directory

Plus these configurations:

branch.autosetuprebase=local

branch.autosetupmerge=always

pull.rebase=true

The effect is that every branch I create off the main "develop" branch is automatically set up to rebase from that branch when I do "git pull". So when I get some review comments for review "xyz", I just do checkout - pull - make changes - fixup - push.

Gerrit's workflow is slighly unusual in that each review must be a single git change, but it keeps a history of its own of previous changes you made to that review.
> While they weigh more than regular tires, they weigh less than the combined weight of regular tires + pump + patch kit, so it's a net win on weight.

Larger moment of inertia, though, so not a complete win. I wonder how the trade off works--where is the breakeven point between trading tire mass for mass being carried in a fixed position on the frame?
Largest companies ranked by their net impact
Please downvote me!
Visited this one in Sweden last summer: https://www.eketorpsborg.se/eketorp-fort/
Not everything was available/open due to Covid-19. But very interesting place from early Scandinavian iron age. (300 AD).
I have a few feet away from me a newspaper from 1943 (the Wichita Kansas Sunday Beacon). I recognize that all stories have slant, but the older publications lack the breathless emotional manipulation that seems to pervade every news outlet nowadays.
Photography has always been more artistry than reality. From film selection, lens choice, framing and cropping, color correction, "dodging" and "burning" details in our out it's always been a compromise between what the camera sees (which itself may not be reality if you're using physical in-front-of-the-lens filters or other distortive techniques) and what the photographer want to convey. That's one of the reasons that Photographic Journalism often holds itself to ethical limitations with regards to how a photo can be manipulated after it's been taken. I'm almost certain that this kind of thing would at least walk that fine line if not fall right on over it.
I find it a bit scary (not in a bad way) how similar we all seem to be, if this story makes it to the front page
Hallo everybody
This is the third and final part of my comments.

6) Broader context with a few illustrative examples

I provided a scheme showing the requirements and possible consequences of econokmically feasible large-scale electricity storage in publicly available application OrgPad.

The scheme is directly accessible under link

https://orgpad.com/s/5BfLP-cxj-7

A few technical instructions (which might be useful if you will use OrgPad for the first time):

Mouse click-and-draw serves for moving the entire canvas, mouse wheel for zooming the entire picture, cells having a fine shadow have a hidden content which can be opened by mouse click on the respective cell.
The application does work in modern web browsers like Chrome, Chromium, Mozilla, Opera, Safari, not (or only very poorly) in IE.

7) Conclusion

The crucial question is why the relevant laboratory and technical records pertaining to this potentially game-changing invention quietly sleep in Lockheed archives. Myself, I have not a capacity to test a model device in laboratory, nor find out what Lockheed exactly tested and with which outcome.

Should any of the readers, however, have such opportunity, I believe that clarifying the crucial question (whether or not Geisler’s device might have indeed worked) might be worth of the respective effort.

Thank you very much for your patience.
You seem to be ignoring the large number of people who seem to be interested in a large exit, who will look for ANYTHING a target audience will pay for and do it to scale, because.

And the other group of people who will assist those in power to maintain it, because trickle down.

You can open your original sentence out to "Can't these <insert any potentially harmful project> folks find some other interesting thing to work on?" As long as there is some sort of incentive on the other end, someone will be interested.
See! I can talk to myself!
Wouldn’t it be nice
Interstellar Object ’Oumuamua’ Is Likely a Piece of a Pluto-Like Planet
> Trump-is-a-Poopy-Head/Cheeto Mussolini genre of art

This and other comments would seem to blow past the fact that the critique also pans the “pc” political commentary (see also the comment on the George Floyd piece).

Ironically it is people in this thread decrying cancel culture that are refusing to engage with anything that might possibly contradict their politics.
Thanks for your thoughtful reply.

I am concerned I won't like the grunt work of repetitive tasks like data clean-up and making minor tweaks to models.

Perhaps one day ML will do its own grunt work. If that happens I wonder what the role of ML engineers will be.
I am a good boy.
For must use-cases the performance cost of loading the model are pretty low compared to either their training cost or making thousands of inference calls (when used in an API). Mayebe they matter if you do AWS Lambda with ML Models, but mostly pickle performance is absolutely fine.

BUT the security problems still remain and weigh much higher
From My to Me
Building a shared vision for Async Rust
The problem is that I don't know whether or not she's factually correct in this case, that's kinda the issue with journalism. I can't just check some central database of reality to know if what she is saying is straight up true and accurate or completely false or somewhere in between. Even if you could do that, "facts" can be easily presented in a way that is misleading, as I'm sure you are aware.

What I have seen is that she has a clear anti-crypto agenda (not just "anti-fraud" as she claims, unless you define all crypto as fraud, in which case sure). So since I don't know the facts myself, I am more skeptical of the narrative she presents than I otherwise would be given her personal bias. Is that not reasonable?
Ask HN: Should we go open source for a new product?
We are preparing a new tech product, and we see more and more open source initiatives.

We can see the benefit that this can have for the community. But it also brings risks of additional competition.

For a tech solution in which situation it is relevant to put its product in open source?
What do you have to pay attention to?

What do you think of the Terraform model with the open source and enterprise model?
I wish they now added a subscription plan or a pricing model for people who use the software several hours per month.
Thank you, this article has actual real information.
You can also repeat this indefinitely:
1. Scale down
2. "Super-resolve"
3. Goto 1
In Germany, we have this game "stille post" where you whisper someone a phrase and then multiple children try to whisper the exact phrase to the next. Most of the time a completely different phrase comes out in the end.
I think it's more apt to say that Python isn't fast, but it has FFI that can be used to interface with things that are fast.

The same is true of JS though, and most interpreted languages that have an escape hatch for FFI. The difficulty of getting it to work may vary.
Or 30 bananas
Interesting. I'm surprised it's not grown commercially then, especially for the more intentional nicotine delivery systems like gum and patches.

Falling over unconscious after a hit also seems like a strange thing to do recreationally, but whatever floats their boat I guess.
That's exactly what I was thinking. Defining an ingress is simple, setting up an ingress controller less so. Defining a PVC is simple, setting up a storage class and its backing storage less so. Running your app on multiple nodes is simple, setting up these nodes and keeping them up to date and secure is a full time job.

Managed k8s or a simple installation in a home lab behind a NAT make it much more tolerable.
Harvard is pretty close to Boston, is the best I could think of.
Fontpreview on Awesome-Python
NAND failures tend to be more localized though.
To be fair, phones do this to not interfere with your sleep when you use it late.

When it comes to street lights, there's an argument to be made that you do want to interfere with/defer the sleep of anyone who's walking/driving outside.

The problem of course is collateral damage to people's houses where street lighting leaks into their windows, but assuming this is mitigated, I think street lighting that intentionally defers sleepiness is better.
I think I will choose killing the one person rather than five.

Because I am a good boy.
You can mislead people without using untruths, that is my main concern.

I generally prefer to consume content that isn't created by someone with a clear agenda pertaining to the topic at hand, because it's not so simple to separate fact from fiction, as you seem to want to believe.
I'm in a similar situation. I think if you read a lot of HN and are reasonably successful, your expectations for life can get detrimentally high. And what happiness and meaning you experience largely depends on what you expect. You're already quite successful yet you're probably very unsatisfied. We read so much about startups and these amazing projects other people are doing, but it's hard to understand what you should actually expect from yourself and your life — are these reasonable things to aim for, or even to just dream about? We're only seeing the survivors and successes, not the (how many?) others.

You could try planning for a longer break or vacation to see how you feel with more freedom, do you still want to do something "more meaningful" or do you actually miss work?

Even more than HN, what meaning you find tends to depend on the people around you. Imagine how some people in objectively much worse positions than you can despite that find much more meaning in their lives than you; usually because of the bonds they create with other people. (If you ever watched Star Trek or Futurama, remember how it wasn't the stuff the characters did that made it meaningful, but rather the characters themselves and their relationships..) Your social influences can be hard to change, but that's how it is. Meaning comes from being a part of something. Stuff you do on your own requires so much more effort to reach that same level of meaning.
And most brands with a product to sell make the problems seem far less severe and significant than they really are, which is why we need to question both.
PiDP-8/I running TSS/8 open for retro challenges
Multimedia died in late 90s. No one no longer wanted to read text in tiny unscrollable unsearchable rectangle with "real book-like" page flipping animation and colorful textured background. All these things looked garish and vulgar long before "web 2.0" and mass javascriptization.

Flash was only good for games, short animated movies and tolerable for videos and audio (before web video standards).
Because the large majority of programs run for less than a second?

Also, who is that most people? Go is a tiny language compared to Java and C#.
The very obvious answer is no, nobody should ever work so hard as to hurt their health.
> Again, by your definition, every non-fixed-width HTML page could be called responsive. I don’t think so.

> Responsive does include other methods as well, but nobody looks at a CSS-less page and calls that responsive because the text always fits the window. That’s just too broad of a definition.

Why? You’re the one making the claim here. The original coining of the term and the author’s 10 year piece certainly talk about other techniques. But not as some formal definition, rather as ways to achieve the original goal: one design which serves all. If the design has the default layout, why would it need to do more?

> The comment I was replying to specifically mentioned that “SVGs are responsive because they resize without additional effort.” That’s blatantly false. “No additional effort” only gives you an SVG that scales (just like images can, and you don’t call images responsive)

Now this is beyond the pale. Just search “responsive images” and filter for before the picture tag and srcset attribute and you’ll see that this is exactly what was expected. Of course you can do more now, but I don’t think it’s even common practice except when automated by tooling.

But more than that, depending on usage, there are ways SVG can scale that raster images can’t. Position and size can scale independently. Images which benefit from it can change aspect ratio without a problem (you can see an example of this on my personal site, link in profile, scaling from very wide to very narrow).
Yes! You can do this using a webassemnbly runtime. For example if you look at your browsers network activity on this page you can see a bunch of standard dotnet assemblies being downloaded https://try.dot.net/

also see https://dotnet.microsoft.com/apps/aspnet/web-apps/blazor
The term "low-skilled" was just invented by economists to justify low wages. I challenge you to spend a day doing something you consider low-skilled next to someone who has spent years in the job and at the end of the day compare your results. https://link.springer.com/article/10.1007/s10460-019-10001-y
After tweeting about HyperInflation, Big Short Investor gets visit from SEC
Strapi.io is nice too
These are great tips. We do most of these.

Automate everything possible.

If you still can't manage and need human support, hire someone in India/Philippines part time, treat them like a valued employee, build a relationship.
You can slice that even finer. There are plenty of people who are not interested in moving away from their hometown.
I remember trying to get the successor N9 which was DOA due to the announcement of the Microsoft deal. Nokia had their platform to go up against Android and Apple, but it was simply too late. I think the N9 compares favorably against both iPhones and Android at the time, and Nokia was ahead in terms of cameras.
> Red lines can be seen painted on the walls in the reconstructed village: These lines mark the line between the original ancient structures and the parts that have been rebuilt.

The red lines are pretty low on some of those tall walls. How do they know how high to reconstruct the wall? An educated guess, or is there some other evidence to point to how tall they were?
What's the 'thing' that is moving through the lifecycle? A user story? A UX persona? A feature request?
Dual actuators don't actually double IOPS/TB for all sorts of reasons - queuing effects, contention for resources elsewhere in the drive, or limitations of the external interface. In practice it tends to be far short of double, so you're better off planning for larger numbers of (possibly smaller) drives with the same capacity and IOPS than for single drives getting faster by any measure.
I’m surprised pickled models are used for sharing with 3rd parties.

But internally in projects I see it used all the time. It’s easy and it works and you trust internal code.
> Structs don't have header information that can be used to infer the type, it's only whatever fields you've defined (with padding potentially).

Sure, so let's make union or "struct enum" and do the same thing Rust does. Add a discriminator byte to the structure and use it to figure out type.

> If you need something like polymorphism with structs, your best bet is to make the struct itself quasi-polymorphic (i.e. with enums) and/or start abusing generics in some fashion I haven't yet figured out.

Well. I think there is the FieldOffset hack. Basically discriminated unions where programmer plays the role of compiler.

[StructLayout(LayoutKind.Explicit)]
struct DiscriminatedUnion
{
// Imagine we have enum like so
// enum
// {
// V1(byte a, byte b)
// V2(sbyte a, sbyte b)
// }
// The "FieldOffset" means that this Integer starts, an offset in bytes.
// sizeof(byte) = 1, sizeof(EnumType) = 1
[FieldOffset(0)] public EnumType TypeFlag;
[FieldOffset(1)] public byte V1a;
[FieldOffset(2)] public byte V1b;
[FieldOffset(1)] public sbyte V2a;
[FieldOffset(2)] public sbyte V2b;
}

https://sodocumentation.net/csharp/topic/5626/how-to-use-csh...

Problem is, this is fragile. It might break on endianess.
And what if every statement I write in the upper language compiles down to one loop that runs a hundred times? The target language is a lower bound, not an upper bound.
I would agree with you, but then I didn't say she was "against fraud". I said she was anti-crypto. Sure if you think all crypto is fraud then fair enough, but that's a pretty bold claim (and verifiably untrue).
Covid has a certain chance of killing any particular person (not the same chance for each person), the vaccine has a much lower chance than average COVID and prevents the COVID chance.
I think if we're talking purely from the perspective of self-interest, many healthy individuals have no reason to get vaccinated. Getting vaccinated takes time and effort, and they can freeload off the large fraction of the population who is clearly going to get vaccinated.

I suspect this freeloading incentive is a big reason govt's haven't used the risk-reward framing as the major selling point for vaccines. That, and the fact that for healthy individuals, there are much larger risks you ought to spend your time worrying about (if you're only looking out for your own best interests).
Phoenix for silicon.
A couple of years ago I started writing down ideas whenever they popped into my head. Didn't really make a conscious effort to brainstorm them or anything, but after a while they start becoming a frequent thing. I probably get a couple a week and now have a really long list of things. Some are obviously bad, others require too much outside knowledge or equipment I don't have, but maybe 10-20% are promising and doable by me.

Honestly the hardest thing is picking one thing to focus on for an extended amount of time. It's tempting to prototype something and then get excited by the next idea and never fully finish what you were working on. I think this is just part of how humans are. I know a guy who worked on rockets and says it got boring after a couple of years.