skysight-inc/HackerNews huggingface dataset:
I'm going to have to disagree with that statement. Containers (as implemented by Docker/containerD/CRI-O) do add security controls. Specifically, separate namespaces, restrictions on capabilities, seccomp filters and apparmor profiles.

If you can easily break out of any containerized enviornment, I'd suggest you could register for bug bounty programmes and make quite a lot of money also you can get a reward from Jessie Frazelle by escaping from https://contained.af/

Obviously containers have a larger attack surface than say a VM hypervisor, but security is not an absolute and both containers and VMs have suffered from breakout issues in the past. No security measure in isolation provides perfect protection.
> That's all well and good - but ICE doesn't just pursue border-crossers -- they regularly arrest and deport people here on Visa overstays..

Isn't visa overstay illegal? Is it not part of ICE job?
Just because you get paid in crypto does not mean you do not hold the money in FIAT. Whatever people think about USDT or other stable coins, its easy to move your crypto worth into USD and back.

What you could do against the fact that the USD is heavily losing on value is a different topic tho.

On the same note: You are likely getting paid in $. Your currency lost about 4% in value against the CHF in the last months. Is this something you worry about? I guess not.
Update: ok so this is about not prosecuting the prostitutes? That's a good thing to stop doing I think, and a dumb thing to ever have done I think.

What can make sense is that it would be illegal to buy sex (but ok to sell). Otherwise, if attacking the prostitutes, the legal system hurts the ones it was supposed to help
yeah I've seen statically compiled go binaries in scratch base images before, seems to work fine.

If you need some basic OS files, Google's distroless is another option.
I would say poorly designed.

The typical btrfs fix is (slightly exaggerated) "When doing an A while a B is pending, re-enumerate the Cs for the purpose of D unless the E is locked, in which case, reschedule the F". Where A...F are all not trivial like snapshot, out of disk space, device rebalancing, and so on.

If that level of thinking of all the things at once is required to write correct code, well, it's evidently not happening.
Ask HN: Is Instagram flooding people with “come back” email?
Hi HN,

I've been receiving the famous "come back" email from them every 15 minutes and it's starting to be quite annoying (to put it mildly) and wondered if just a very targeted flood attack or if some HNer were also being impacted with a bug IG ?
Voting seems unlikely to affect this matter. Federal employees are three times less likely than those in the private sector to be fired. Elected officials come and go, but the permanent bureaucracy lives on. In many places it is essentially impossible to fire a teacher or police officer outside of egregious wrongdoing.
Unfortunately, the renderer that gets used will sometimes itself depend on the file. For example, if you transfer the generated Mobi file to a Kindle as the article says, it will get rendered using an inferior renderer (in terms of kerning, for example) compared to the renderer that would've been used had the file been a KFX ("Kindle Format 10").
Show HN: Litmaps – Visual Research Discovery Tool
> This is why in Germany there were protests against recording peoples religion during the census.

Indeed, and Hitler did use census to identify Jews to kill, thanks to the sabotaging actions of René Carmille, tens of thousands of lives were saved (although Carmille himself survived torture, he died in January 45)

The first ethical hacker doesn't get enough exposure IMO.

"He also hacked his own machines, reprogramming them so that they’d never punch information from Column 11 [which indicated religion] onto any census card"
YC is a form of VC, and first and foremost validates "Will this make good returns?", not "Is this legit".
> One of my daydreams is that we learn to understand some cetacean languages.

Me too!

I sometimes think about the devices described in Dan Simmons' Hyperion Cantos that enabled the wearer to talk to dolphins on the planet Maui-Covenant[0].

I am sure this is possible today, using a library of recorded dolphin sounds and perhaps also movements, environmental conditions and apparent stimuli to train a neural net that can infer meaning.

I did find this article from 2011 about a future test of a dolphin communication device [1].

[0] - https://hyperioncantos.fandom.com/wiki/Maui-Covenant
[1] - https://www.newscientist.com/article/mg21028115-400-talk-wit...
Show HN: Stickley – Create post it notes privately or with a friend/team
Ha, that's a lovely coincidence, thanks for sharing.

FWIW I went down this train of thought while listening to an audiobook of Hofstadter's "I am a Strange Loop", which doesn't quite go down the same road but triggered the idea well enough in my own brain.
A bot that makes your Slack experience 10x better
You don't need to scroll all the way down to a couple random comments mentioning NFT to see the project is a scam. It's very obvious just by watching the video or reading the first paragraph, it's just ridiculous.
Definitely important to note, I wonder if upx could solve this via execing an memfd_create in some mode. Also wish upx came with a trivial extraction tool so you could use it for distribution but not runtime.
All the mental health questions/advice: Forget it. Seek a therapist. Depends on your country of course. In Germany, you have the right to see a therapist and your health insurance pays for it.

Don't ask on HN to get bunch of self-help books and apps, always start with the deep work of seeking and working with a therapist for a year.
What's also interesting here is that it revealed to me that as of early 2020, Facebook was still using the old (pre-2015) GraphQL syntax at least in part; because the examples you see in the linked fbchat code are of the old internal syntax before they opened it up to the world:

https://github.com/fbchat-dev/fbchat/blob/master/fbchat/_gra...
Collective punishment is a clear and unilateral signal that something is extremely wrong and not within the punisher's power to unwind properly (or prevent in the future). Until it's clear that this university can be trusted, they should not be. I would feel the same about any schools that I attended, and I would not have issues with blanket bans for them either if this was the kind of activity they got up to.
"DNA of Rafflesia surprises biologists" would be just a fine title, "The DNA of Rafflesia is strange" would be even better.

Biologists are not stunned all the time as so many people apparently love to think. I understand that the cartoonist image of smart people being shocked is a comforting idea for some readers.

And there is not need to repeat again or again that is a parasite or smells like carrion like it came from mars. Rafflesia is one of the most famous vegetable trivia and part of the popular knowledge.
>Scarcity is also not something that you want from a currency, fundamentally. A currency needs to be abundant when needed, and scarce when oversupplied. That's the point of controlling the money supply based on economic growth rates, and the entire reason we have a Fed.

Yes, we mold the currency to our needs, that's why we have abandoned gold. This is one of the reasons the euro is completely flawed. Each eurozone country has different needs, yet there is only one currency that can only be controlled for the eurozone as a whole. Without further political integration it is not possible to actually give each country what it needs. Some countries need a weak currency, some need a strong currency. Paradoxically, the euro is both too strong and too weak at the same time.
I get it, but there are just so many holes in this line of thinking.

Once it becomes legal, the supply goes up, prices go down and it won't "get you through college". Plus I don't see why our decisions on prostitution have to be driven by the economic policies that have increased college tuition 2-3x faster than the rate of inflation for 30 years.

Also you will have corporations form to market, manipulate and addict people to their "product". Do we really want to go there? Thailand and Amsterdam and Las Vegas are fine places (sorta) but they dont provide the joy one would hope from the "empowering" you think is so great.

Also I would think in an era of COVID awareness people should consider the public health reasons from STDs (but not just those) why sex work will overall lead to more sickness and death if we promulgate it via market mechanisms. Overall are sickness and death likely to increase or decrease?

I'm not sure where you are going with your argument (speculation? sources?) that a lot of men get married just to have sex. If they want purely the sexual pleasure there are plenty of ways to get that that are a lot easier and less consuming than getting married! (Porn, devices, etc) If they want companionship over time, you don't really get that through prostitution. (Escort/rent-a-dates are legal as are hiring assistants). If they want kids and to raise them prostitution won't help. If it's not just orgasms which men want and what men is the appearance of a woman being interested in them, smiling, acting sexy per webcam culture... but what the woman wants is money, I get that if we legalize prostitution we enable that illusion for the man and economic power for the woman but what is the great benefit of that? We undercut our efforts for women/daughters to get paid equally for their minds to create and instead push them into selling their bodies and abilities to deceive men as part of their job. OK we've created a market, but to what end?

Look, I get that people think the status quo on this should be reconsidered but it looks like more rich people wanting to use their money to get whatever they want without consideration of the people servicing them, hoping that some anecdotes of trickle down "success" hide the misery of the system they want to promulgate.

Sorry for the rant. Nothing personal.
To be fair i trust a decentralized monster where millions of people have millions of their money in more than most governments.
Looks cool!

And might be useful for svg placeholders before lazy-loading larger images.
Look, I'm not trying to argue that lockdowns were a bad idea or what have you. Just that they were the easiest cognitively for non-technical politicians.

The hard, longer-term work of building out local vaccine manufacturing and distribution wasn't done because it required way more foresight, executive planning ability and basic scientific/medical knowledge.

The other contributing factor is that politicians don't want to be embarrassed if they create some expensive manufacturing facility which ends up being unused. Better to just not make it at all and you'll be safe - after all, that's what everyone else did.

Lack of spending on science research is one thing, but couldn't they have at least imported a little talent to create redundant vaccine manufacturing facilities to deal with just this one acute crisis? It seems like the only person thinking about that was Bill Gates? Why can't our elected leaders show the same leadership? The only country that I'd expect to have this kind of technocratic vision and execution would be China.
It is best practice and I wish it was common practice, but there's a lot of friction in the way and some people will actively work against you.

Static linking glibc is painful because the former maintainer has some strong opinions: https://www.akkadia.org/drepper/no_static_linking.html

Most distros force you to dynamically link every dependency if you want them to package it. So the default build for most projects is dynamic

You've stumbled on a holy war between distros and guys like you, me, and Linus Torvalds[1] that want to deploy a binary and just have it work everywhere.

1: https://youtu.be/5PmHRSeA2c8?t=295 (Highly recommend watching Linus's answer ~6 minutes in)
> I'm talking about a pattern of behavior where staff members act unprofessionally.

Could you please provide some sources? As the other poster noted this is the first time we hear of this. Would be keen on knowing more
Would it change the conclusion? I can’t find good age-specific fatality rates for either thanks to all the search results being polluted with news about controversy rather than actual science, but the baseline pre-COVID stats I’ve seen for the incidence rate of venous thromboembolism in the USA is 30/100k/y in 25-35 year olds and 300-500/100k/y in 70-79 year olds.

Again, that’s the rate it was happening already (well, in 2003), no vaccine and no pandemic. This doesn’t seem enough to counteract the roughly one thousand-fold decrease in risk of being vaccinated relative to not being vaccinated.

In any case, this isn’t “people getting blood clots and dropping like flies in parking lots”.

I’m old enough to remember when deep vein thrombosis was all over the news, convincing people to buy special socks for long-haul flights.
> console development.

Curious if you had a direct experience with the console side of things with your game?

Also, can I provide you an opportunity to promote your game by asking you to tell us more about the game you shipped? :)

(The rest of this isn't directed at you but more trying to clarify the Godot console situation for anyone else interested.)

I've noticed there seems to be a lot of misunderstanding (particularly by "less commercially experienced" game devs) in relation to Godot's "console support" or apparent lack thereof.

Godot do now at least have a page[1] to directly address the issue and clarify the situation which can be mostly summed up with:

"... there is no engine that is legally allowed to distribute console export templates without requiring the user to prove that they are a licensed console developer."

and:

"Console ports of Godot are offered by third-party companies (which have ported Godot on their own)."

I seem to recall there was one FLOSS game engine that got a grant or something to incorporate support for some XBox initiative (that wasn't "full devkit support" level) but for every other major console there's no engine that has FLOSS code supporting it--and if it did then no one could probably tell anyone about it because of NDAs. :D

As a side note[0]:

"Additionally, there is some unofficial third-party work being done on building for some consoles. However, none of this is included in the default build scripts or export templates at this time."

The situation is also the same for other FLOSS projects, e.g. the Rust language, where the issues tracking game console support basically say "if you have the ability to develop for (current) game consoles, you also know we can't talk about it here where others aren't under manufacturer NDA":

https://github.com/rust-gamedev/wg/issues/90

https://github.com/EmbarkStudios/rust-ecosystem/issues/18

https://www.reddit.com/r/rust/comments/jtqgn4/q_feasibility_...

Hope your game is selling well. :)

[0] https://docs.godotengine.org/en/stable/about/faq.html#which-...

[1] https://docs.godotengine.org/en/stable/tutorials/platform/co...
DeFi 2.0 – First Real World Loan Is Financed on Maker
If one doctor at a hospital does very bad things - then yes, I would avoid that hospital completely. Because in a working environment, bad actors would be detected by colleagues, etc.
And since this not happened, one can only assume the whole hospital to be deeply flawed.
> for health reasons

I can relate to that, which is also a reason why I now _try_ to consume weekly newspapers (like the linked "Die Zeit") instead of the daily/hourly short-lived news. In my experience the latter tend to report more about "drama" and focus more on negative things, exactly like you said.

I also saw your remark in the other chain:

> I was referring more to the discourse, which seems to be about heightening nationalistic sentiments by pitting governments against each other fighting over a small stockpile

And that also makes sense. I'd say that's something especially prominent nowadays due to Brexit. The amount of news highlighting the failures of the EU certainly got an uptick in the UK and so did the news portraying UK's vaccine import as "egoistic" in the German media. There are certainly more shades to that, but it's pretty obvious from the newspapers as well that the EU and UK are just frustrated with each other currently.
Thanks for publishing this as a notebook. I really love the platform.
You should put a warning that it does not work on mobile. The UI isn’t compatible. I’ll check it again from my laptop later.
Linux kernel is blocking contributions from the university mail addresses, as this attack has been conducted by sending patches from there.

It doesn't block patch submissions from students of professors using their private email, since that assumes they are contributing as individuals, and not as employees or students.

It's as close as practically possible to blocking an institution and not the individuals.
A little different from brown bag, in which the non-traceable payment travels under the table.
https://www.youtube.com/user/DaveAckley
The problem is that we heavily depend on "oracles" in the real world, namely government published statistics and those could be manipulated, even if monetary policy was automated.
I never mentioned Sicknick and was not referring to him. There is literally video of insurrectionists attacking police with a fire extinguisher.

https://m.youtube.com/watch?v=mPQuJrLTB-M
Moving Forth (1993)
Show HN: X-Ray for NFTs: Know what you're buying
Lovely! You / your students may also like: http://molleindustria.github.io/p5.play/
> just as no one would collect “Digital token #385839, definitively devoid of use”.

As someone who gets regular offers for my 3 minute art pieces without promoting this anywhere or so. Literally just by having them. I have to disagree

I can't explain it but people definitly collect useless items
Unfortunately I had to check it as well, and g seems to be a generating element of a finite cyclic group G

https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exc...
If we believe some nonsense leads to people dying, then we should consider that trying to censor the nonsense might bolster its support, leading to more people dying
Then you will want to manage the configuration file and to browse logs, and you ll have to mount files to you container. And your deployment start to reimplement (a subset to your needs) what distros did System integration complexity didn't disappear thanks to containers. It was just moved to another place.
I dd add that, being convenient for developers doesn't mean it's convenient for hosting management. At the end, when one side convenience is taken in consideration, it often translate to complexity and pain at the other side.
K8S become in some companies more a mandatory runtime requirement than a hosting commodity/facility.

As a (former) developer I d rather ran redis in a container during development, but for production I d rather rely on boring VMs unless some scaling is required. (Managed k8s case set apart)
Scan your NFT assets.

Check whether NFT assets are really “decentralized”. More often than not, several projects store NFT media and metadata on centralized servers, controlled by the project team. While you are buying the NFT, the associated media can easily be changed by the team at their will.

It’s easy - simply install the extension and visit any NFT on Opensea. You will immediately discover the key details of the NFT without having to leave your page.
Imagine the same argument, for a hypothetical "reality annihilation" technology - justifying research in an area that is actively harmful and creates secondary, tertiary, and ... Nth order effects just because "others will do it" is not a useful baseline by which to decide what to do, IMO.

Personally I think this AI stuff is pretty neat, but society must have a larger conversation around the existing power structures before we just let the most well capitalized business entities and their business owners (again, some of the wealthiest figures in recorded history) utilize these tools through which capital will become further concentrated just because some of their employees have a PhD and make 350k and now are able to just spend all their time developing technologies with clear non-linear payoffs, enriching some at the explicit expense of others at a structurally different rate than previous technological innovations.

What does everyone think of Palantir? Do they have much of a foothold in Europe? I imagine not since they are direct contractors to the US government, but I mean they are again doing massive data analytics on the human population in ways that are almost as sketchy as Facebook, but with worse implications because of the direct interfacing with the military-industrial complex.
What’s wrong with MLOps?
So far that hasn't hurt Elon Musk a bit...
Tangentially related, if any macOS users are shopping for a DB client here’s my experience:

After many years Sequel Pro (MySQL only) started having problems so I tried every tool in this class for macOS and ended up standardizing on TablePlus.

It supports most common DBMSs, works on Mac and Windows, and apparently has a Linux alpha.

I still prefer Sequel Pro’s UI but TablePlus is ok. No critical bugs although import of massive or complex MySQL dumps still works more reliably on the official CLI client.
Nice recovery. Appreciated!
How does the body regulate temperature? (2019)
Why wget|dpkg and wget|sh instead of apt to download Pandoc and Calibre?

You should be able to replace all this:

!wget https://github.com/jgm/pandoc/releases/download/2.11.3.2/pandoc-2.11.3.2-1-amd64.deb
!sudo dpkg -i pandoc-2.11.3.2-1-amd64.deb
!apt install libgl1-mesa-glx -y
!wget -q -O- https://download.calibre-ebook.com/linux-installer.sh | sudo sh /dev/stdin

With simply this:

!apt install pandoc calibre
I was just thinking about adding another wiki page for that, but I'll give a brief explanation here:

Firstly, a triangulation is made from the points and colors are chosen for each triangle.

Then, the variance between the triangles and the original image is calculated using Welford's online algorithm [1]. The variance is computed by iterating over the pixels of each triangle and comparing the pixel color of the original image to the color of that triangle.

Lastly, the fitness is multiplied by a weight to ensure that it covers the entire canvas.

The source code may be a bit confusing because I've applied many optimizations which make it 10-20x faster.

[1] https://en.wikipedia.org/wiki/Algorithms_for_calculating_var...
As far as I can tell, the papers he co-authored on Wikipedia were unlike the abuse of the kernel contribution process that started last year in that they did not involve active experiment, but passive analysis of contribution history.

Doesn't mean there aren't ethical issues related to editors being human subjects, but you may want to be more specific.
"In other news, we just learned that any half-decent security agency has already injected their own vulnerabilities and back-doors in OSS."

We did not learn that today, but we still assume it.

Btw. the professional agencies have their vulnerabilities injected probably way down in hardware level. Intel ME etc. and or even more bare to the metal.
Features:-
- On-chain spectrum
- Decentralization score
- Nifty Analysis
- Media and metadata location

Note: The NFT Scanner browser extension DOES NOT store or collect your code or data. Also note that this is still a prototype, and some data for non-standard NFT implementations might be missing.
Apart of very cool visual effect, the app got my attention as an interesting example of lightweight GUI use with Go. Another rabbit hole for today. Thanks!
They're not _all_ connected to some central police network though, many (maybe most) are private cameras. While the police can request footage to aid an investigation I don't think there is an obligation to have it stored etc.