skysight-inc/HackerNews huggingface dataset:
Years and years ago I saw an advertisement by a SAN array vendor where their gimmick was that they supported very cheap read/write snapshots of very large datasets, in combination with a set of transforms such as data masking or anonymisation.

Their target market was same as the OP: developers that need rapid like-for-like clones of production. The SAN could create a full VM server pool with a logical clone of hundreds of terabytes of data in seconds, spin it up, and blow it away.

The idea was that instead of the typical "DEV/TST/PRD" environments, you'd have potentially dozens of numbered test environments. It was cheap enough to deploy a full cluster of something as complex as SAP or a multi-tier Oracle application for a CI/CD integration test!

Meanwhile, in the Azure cloud: Practically nothing has a "copy" option. Deploying basic resources such as SQL Virtual Machines or App Service environments can take hours. Snapshotting a VM takes a full copy. Etc...

It's like the public cloud is in a weird way ahead of the curve, yet living with 1990s limitations.

Speaking of limitations: One reason cheap cloning is "hard" is because of IPv4 addressing. There are few enough addresses (even in the 10.0.0.0/8 private range) that subnets have to be manually preallocated to avoid conflicts, addresses have to be "managed" and carefully "doled out". This makes it completely impossible to deploy many copies of complex multi-tier applications.

The public cloud vendors had their opportunity to use a flat IPv6 address space for everything. It would have made hundreds points of complexity simply vanish. The programming analogy is like going from 16-bit addressing with the complexity of near & far pointers to a flat 64-bit virtual address space. It's not just about more memory! The programming paradigms are different. Same thing with networking. IPv6 simply eliminates entire categories of networking configuration and complexity.

PS: Azure's network team decided to unnecessarily use NAT for IPv6, making it exactly (100%!) as complex as IPv4...
Compare your site with hn on "bedtime mode" in android 11. It's the mode that makes the screen grayscale. In fact I'm sure you can emulate it.

Some text on your site is too light, and the contrast is meh. Otherwise, nice site, I'll be sure to check it out again in color tomorrow :)
I agree. The author laughably claims APIs are how applications take to each other and implies they are necessarily remote or on the Internet. Web APIs are one kind of API, but so are various C Library interfaces.
There's Dillo too, but unfortunately last time I checked neither of them were even as close to usable on most sites as Opera 9.x (which was already many years old at the time, but had been quite popular for a while before that.)
To that point, I find it entirely un-amusing that Google is presenting me with a notification on my phone that says: "Account action required: add your birthday" %@$#

A piece of info they very likely can derive, but would really appreciate if I'd help them out and confirm it. Screw them.
Day Jobs for Writers
Write down your password. What's your threat model- Spies breaking into your house or some skiddie doing password stuffing?
It is a big story, and something about it isn’t adding up.

Autopilot wouldn’t engage on the road as outlined, and even if it did wouldn’t exceed 35... that plus the driver would’ve had to activate it then leave to the back seat, and ask the passenger to tug the wheel every 15-30 seconds to keep it active.

I’ve never tried to leave the drivers seat with autopilot engaged but I doubt it would work. Would be willing to try just to put some of this misinformation surrounding the news to rest.

Even if it was engaged, this is a massively human error, not autonomy error. It’s a beta service- you have to hold the wheel and pay attention. It isn’t L5 FSD.
Agreed. Operating systems abstract resources, the fact that we needed containers and VMs point to the fact that the first set of implementations weren't optimal and needs to be refactored.

For VMs, security is the one concern, the others would be more direct access to lower levels and greater access to the hardware and internals than just a driver model.

For containers I'd say that the abstraction/interface presented to an application was too narrow: clearly network and filesystem abstractions needed to be included as well (not just memory, OS APIs and hardware abstractions).

I imagine that an OS from the far future could perform the functions of a hypervisor and a container engine and would allow richer abilities to add code to what we consider kernel space, one could write a program in Unikernel style, as well as have normal programs look more container-like.
I was anticipating clicking on it hoping for the source code - because at the time I was writing an HTML editor myself (as a young teen) and was blown away by some of what HotDog could do. Would love to peer into some of those older projects.
I don’t know if you’re genuinely confused or just willfully leaping to assumptions. I’m going to assume you just genuinely misunderstand what I’m saying.

My original point was to argue the idea that journalist aren’t some innocent class of truth seekers getting a bad wrap, but that there is an observable strong and growing anger/distrust at journalistic institutions and so we should consider those perspectives and treat them seriously.

I’m not saying to round up the journalists, I’m not saying the police are justified, I’m not even saying hating journalistic institutions is justified. My direct and explicit point was to mention the counter argument against the idea that journalists are innocent and getting unjustified blame/anger directed at them.

I implore you to reread this comment chain with an open mind instead of what you currently seem to be doing, which is falsely trying to predict which ideological game I’m playing.
there is a legal and ethical argument. what constitutes a protected class should not be limited by legal obligations, but to a liberal democracy point of view. according to some recent polls liberals themselves report the most fear of their views being silenced, and these tech platforms should really think about what societal harm they are doing when nearly all dissent can be labeled as hate or racism and silenced. said another way, I'd like to understand exactly how were suppose to discuss sensitive issues l(for example immigration policy) when anything one side says is immediately labels racist.
not really.

there is this stipulation of using a clean room in which to introduce your idea in order not to be sued for “stealing” intellectual property.

And often times, the same person cannot be used in that clean room.
This was a great read from the man himself: https://www.amazon.com/Third-World-First-Singapore-1965-2000...
One way around that is to never put your real name on stuff outside of/owned by your employer. Keep your work and personal life as separated as possible.
Just my two cents of feedback: amongst my friends and colleagues in industry, I'm one of the last people that still participates here. A few of them only participate to the minimum necessary to help their startup. The rest absolutely abhor this place, and that varies from people I'd describe as ranging from leftists to neoliberals.

There are many people who have been alienated by what the poster above is talking about, and unfortunately there is a very clear demographic slant in who is being alienated.
honestly, I have been toying with the idea of building a web browser project that has no JavaScript. just completely ignores the script tag or any JavaScript related things. like onclick, and other attributes.
Just because a policy on passwords or root access was broken, it doesn't mean that it was nefarious (as implied here - eavesdropping etc.).
Would the moonlighting clause apply here if the employee happened to be a CA resident?
Meta HN question: How does something with 5 points, 1 comment and was posted an hour ago make it to the front page? Just curious.
Most of tech workers aren't half as free as the 5-years-at-FAANG-plus-a-moderately-successful-exit-already-got-my-Fuck-You-money folks who hang around this site. Most are working on boring Java programs or managing corporate networks, for well under mid-tier doctor compensation. Certainly not SF tech-giant money. And that's just in the US, let alone internationally, where comp even in tech-heavy cities doesn't approach FAANG-on-the-West-Cost or finance-in-NY-and-Chi salaries. The profession as a whole is a damn sight closer to blue-collar than we all want to pretend it is, and social status bears that out, especially (again) outside SF tech & VC circles. The fancy-B-school CEO at your tech startup is socially superior to the highly-paid tech nerds. That's just how class in America works. Earn enough money as a tech nerd and maybe your kids will be the next rung up the ladder, if you make the right choices especially re: where to send them to school (and I don't mean higher ed).

Expressions of superiority over or freedom from management on here are class-anxious posturing, expressions of a lived reality by a rare few, and sheer fantasy the rest of the time.
(I'm not holding my breath for the refactor though...
We're stuck at a local maximum and we're better at adding stuff,rather than removing/refactoring them.

Also- just about EVERYTHING is built on top of these current layers)
Relevant: https://youtu.be/Tom1onu1nw8
As a general rule, yes.

And it is very possible that the university you are currently at owns some rights to your current work (it's a complex legal topic, but a lot of schools do have a copyright transfer in their rules).
I think for some jobs it makes sense to have on-call as part of the job description, but it's heavily overused. If there isn't imminent danger I don't think it should be ever required to force someone to compromise rest.

If it's just a question of product uptime then you should have enough people and pay people extra to be on-call. And don't deploy things at 5pm on a Friday.
Thanks for sharing.I found a lot of interesting information here. A really good post, very thankful and hopeful that you will write many more posts like this one.

https://www.njmcdirect.one/
Huh! There’s a great song with this name and I always assumed it was just some randomly chosen words and not a reference to a real thing.

The song is Jumping Frenchmen of Maine by El Ten Eleven. The band is only two people, a drummer and a bassist with a loop pedal, worth watching on youtube: https://youtu.be/F-J9pXAt8Rc
I don't know what the current state of the art knowledge is with respect to freezing or hibernating people. I think the science-fiction depiction (like in the Alien movies, or Han Solo frozen in carbonite) is generally that a person's metabolism is basically stopped and (optionally) their body is cooled to a very low temperature to stop chemical processes from happening except at a very slow rate. I think it's implied that you don't age at all, and you probably don't consume calories. (The machine you're in just requires electricity to run presumably and maybe has some consumables like IV fluid and drugs.)

If I understand correctly, one of the barriers to the science-fiction approach of freezing people is that ice crystals form and destroy tissue if one were to actually literally freeze a person. In order to survive that, you'd need some way of inhibiting ice formation. Maybe it could be solved by injecting people with some non-toxic antifreeze solution, or immersing them in fluid at such high pressures that ice doesn't form, or you could just maintain a temperature just above freezing. And then there's the problem of how to thaw a person back out. I don't know if that's solved, but I guess there is a body of knowledge around reviving extreme hypothermia cases.

Less extreme forms of hibernation might look like medically induced coma or like a bear hibernating through the winter. I don't know if bears age significantly while they're sleeping. I'd guess that they age somewhat, but at a slower rate than normal.
I would assume that some points are worth more than others. As I believe Orwell said, we're all equal here, but some of us are more equal than others.
Here’s a video of someone not only exiting the driver seat, but exiting the CAR while autopilot is engaged, and almost getting locked out: https://youtu.be/Z_N5zrFJgII

Here’s another video showing autopilot engaging with no lane markings in a neighborhood and setting the target speed too high: https://twitter.com/LyftGyft/status/1383917552762384386?s=20
> "How are stories ranked?"

> "The basic algorithm divides points by a power of the time since a story was submitted. Comments in threads are ranked the same way."

> "Other factors affecting rank include user flags, anti-abuse software, software which demotes overheated discussions, account or site weighting, and moderator action.
"

https://news.ycombinator.com/newsfaq.html
Who doesn't want to win at what they do? I think this is more about picking the game you want to play.

Also, if you "know you're perfectly okay right where you are" why would you want to change?
Nope, because the contributions in question are to IBM's VNIC driver, and until 3 days ago this employee was working on this project in an official capacity. The employer is expressly allowed to claim ownership of work that relates to the employment, which this did.
Could this technology go the way of Modular Smartphones or Virtual Reality?
> Another reply mentioned the Covid-19 vaccines; not quite a survival-of-the-species level problem, but serious nonetheless.

In a morbidly curious way, I wonder what society's reaction and government reactions would have been in the emergence of an airborne pathogen MUCH worse than covid19. Not some fanciful human species killing event like in "The Stand", but with a potential to kill 10-20% of the planet if left unchecked.

I hope that wealthy countries' reactions to finding a vaccine, cure and preventing the spread would make the Manhattan Project look like building a back yard tool shed, but I don't know for sure how we would have handled the global catastrophe.
Could work. Alternatives probably exists but that just confirms the idea is ok. Would need some marketing to bootstrap - what good is an empty market place?
Neighbour manages to pollute the 2.4 ghz spectrum with his 120 IoT devices
I honestly never find that folding technique better than just.. fold it thrice using the exactly same three folding lines:

https://i.imgur.com/CRxFYwS.png

The end result is identical, not really slower, it's easier to adjust the "proportion' during the process, and it works better with long sleeves with minor adjustment.
I actually thought about youtube as a contrasting example. Youtube has their recommendations on their homepage— that makes sense to me. I haven't chosen any content yet, so they want to help me.

But in this case on Twitter I've already chosen a specific profile to view, and now they're obscuring that with recommendations.
Cosmic Dance in the Awake Brain
I am fairly certain that virtualization is going to be a core tenet of computing up to and including the point where the atoms of the gas giants and Oort cloud are fused into computronium for the growing Dyson solar swarm to run ever more instances of people and the adobe flash games they love.
We've had capability based security frameworks aka MAC (ex: AppArmor) in Linux since 1999 or earlier. Containers (which also existed long before docker) have been popularized for convenience, and virtualization would still be useful for running required systems that are not similar to the host. If anything it looks like we're going towards a convergence with "microvms".
GP wasn’t permissive towards corruption. Rather, he/she was demanding about evidence.
Yes, and you've just described a classic pump-and-dump scheme and the "painting the tape" tactics used for the pump.

https://en.wikipedia.org/wiki/Pump_and_dump

https://en.wikipedia.org/wiki/Market_manipulation#Runs
Yes. Specifically, a SPAC that, as Levine said, seems designed to be used by a Chinese company looking to go public on a US equity market.
More like extremely guilt-inducing and embarrassing, but yeah, scary works.
WebDev Tools Comparison
Hell, my company uses Azure repos, and they're still stuck on ssh-rsa keys:

https://developercommunity.visualstudio.com/content/idea/365...
Any such warning needs to be clear to the employee. There's no particular requirement for it to be clear to the rest of us.
Great, you can work from. So you take your California money to middle of nowhere and buy a home for cheap. Renovate it and now it’s awesome.

However, that local, who isn’t making California money, that is working a local job and making local money and is hoping to move up in housing for their family is priced out because housing pricing has doubled or even tripled.

People that wanted to retire to rural or remote areas where pricing is traditionally cheaper are now fucked over.

Sure, the owner didn’t need to price their home higher. Sure, whatever the market will bear. It still doesn’t mean it sucks less for the couple with a baby on the way hoping to buy a home in their home town that is now double and triple the cost.

No, I haven’t been personally affected by this. I’m just worried what is happening and will happen around the US in the coming years.
Security
========

* sshd(8): OpenSSH 8.5 introduced the LogVerbose keyword. When this
option was enabled with a set of patterns that activated logging
in code that runs in the low-privilege sandboxed sshd process, the
log messages were constructed in such a way that printf(3) format
strings could effectively be specified the low-privilege code.

An attacker who had sucessfully exploited the low-privilege
process could use this to escape OpenSSH's sandboxing and attack
the high-privilege process. Exploitation of this weakness is
highly unlikely in practice as the LogVerbose option is not
enabled by default and is typically only used for debugging. No
vulnerabilities in the low-privilege process are currently known
to exist.

Thanks to Ilja Van Sprundel for reporting this bug.
I have to admit that I only skimmed this, but the core message seems to be it's a publicity stunt to publish the message that you should do work you truly enjoy and find rewarding, and not keep putting off to another day the chance to find personal satisfaction in your career.

And that perhaps one's gross yearly income is not the ultimate and best measure of personal success.
Gooey: Turn (almost) any Python Console Program into a GUI application
>I'm trying to think what's changed

SO used to have really god content for really some fundamental questions which gave it some credibility. As it accumulates more content the quality is really going down - I actively avoid SO unless I can't find any other source.

GitHub - literally every problem I have nowdays I spend searching through GH issues, reading through the code upstream and reporting back. For example I was working with .NET framework for a while (~5-6 years back now) and when dealing with closed source frameworks SO was a replacement for support channels. Now even as I'm coming back to a .NET core project - everything is OSS and on GitHub.

Docs also got better, MDN is now defunded by mozilla but where I had to do a SO search for random JS behavior I can now look up decent references on MDN. I think Google got better at indexing documentation as well.
That will show dead comments, but near-dead ones are still grey.

In fact, dead ones are gray too, so you effectively increase the amount of gray comments ;)
> whenever I read stuff like this it is incredibly disheartening

Its not something to worry about most of the time. At least here in Australia the below situation would be very unenforceable

> if I wrote a sequel to Gone with the Wind, they would have had the rights to it.

A company buys your time and the IP in and around the industry your job is in. Like you can't steal customers, you can't steal IP. If you're paid to come up with a new product/idea you can't just resign and become a competitor you'll get sued for that.

But if your a programmer and write a sequel to Gone with the Wind even if your contract states that the company owns your ideas it won't stand up in a court if the company tries to take ownership. So long as you didn't use company hardware or information which can only be gotten at that company.
No, it's not too much to ask for, and visual studio supports that. But, it is too much to ask for as a default, because it's a terrible choice. The only reason somebody would want both #1 and #2 is if they put tabs and spaces into the same document. That's a terrible idea. Also #3 - why wouldn't I want my editor to auto indent the next line after an opening brace? I'm sorry, but the visual studio defaults are just better (and more popular) than your choices.
I meant "zero-mean normal distribution".
Really what did JavaScript bring us? (And there goes my points!)

I want to search for information and share information with people.

I don't want any more from the net. It feels like what we want is being surpassed by those who want to monetise us.
Cyberpunk in the Nineties (1999)
Corporal Punishment and Elevated Neural Response to Threat in Children
Mac App Store review folly
If I recall correctly both Volumio and Moode were forks from the same project.
I do: Yesterday when I was looking up how to declare and use arrays in bash for the 1000th time. Bash is probably the #1 reason I end up there through a search.

After 25 years professional experience (plus 12 years before that), there are a number of reasons why I search for "how to do X in Y" online at least once a week:

- The language is poorly designed and has a lot of unintuitive, unorthogonal, difficult-to-remember parts or nasty footguns, but people continue using this beast-that-cannot-be-slain out of industry inertia (like Bash or CMake).

- The language is in a constant state of flux, adding new features and best practices / idiomatic things, and the cruft-that-must-not-be-used buildup is so insane that even a few years out of the loop makes you feel like a complete beginner (like C++ or Python or JS).

- The language is complicated enough that unless it's your day job you won't remember how to do basic things after a few months away (like Rust or Haskell or Gradle).

- It's been 10 years since you touched it and how the hell do you concatenate a string again???

I think the only languages I can just slide right back into are Java, C#, LUA, and Go (and C, but probably only because I used it daily for decades).
pg? Who's pg?
What a great accompaniment this would be to reading Steven Levy’s book Hackers - The Hero’s of the Computer Revolution.

https://en.m.wikipedia.org/wiki/Hackers:_Heroes_of_the_Compu...
1. Housing cannot be both affordable and a good investment.

2. This is how gentrification works. Many of these folks are coming because they’ve been priced out of wherever they’re coming from.

3. Housing can’t be both a right and subject to free-ish market mechanisms.
Really looking forward to seeing ssh-rsa (i.e. RSA with SHA-1) behind us!

Unfortunately, implementation support for the new RSA with SHA-2 algorithms is still behind in some languages. I've had an open issue for Go's x/crypto/ssh since last February with an accepted proposal and working code, but I've struggled to get a review despite clear interest on the issue.

https://github.com/golang/go/issues/37278

https://go-review.googlesource.com/c/crypto/+/220037/
Regulators Urge Peloton Tread+ Owners to Stop Using Treadmill Immediately
I appreciate the author's point, but it's not like selling the diploma prevents him from saying he went to Harvard, nor does it allow the purchaser to claim that they did themselves..