skysight-inc/HackerNews huggingface dataset:
I was just looking into various approaches to use process isolation for security on the desktop in Linux.

Containers within VMs are a norm for security in cloud-native [1]. Some lessons there could be applied to desktop.

One option is the approach of Spectrum OS [2]. They use crosvm (same as what Firecracker "micro VMs" uses) and virtio_wl [3][4].

Another approach might be x11docker [5] with Kata Containers [6].

Curiously, the work for WSLg (WSL with graphics) [7][8] to support graphical Linux guest VMs could also be applied on a Linux host.

1: https://archive.fosdem.org/2020/schedule/event/kernel_address_space_isolation/attachments/slides/3889/export/events/attachments/kernel_address_space_isolation/slides/3889/Address_Space_Isolation_in_the_Linux_Kernel.pdf
2: https://spectrum-os.org/
3: https://spectrum-os.org/design.html
4: https://alyssa.is/using-virtio-wl/
5: https://github.com/mviereck/x11docker
6: https://katacontainers.io
7: https://github.com/microsoft/wslg
8: https://xdc2020.x.org/event/9/contributions/611/attachments/702/1298/XDC2020_-_X11_and_Wayland_applications_in_WSL.pdf
It's the decades of perception of the Linux kernel as an insanely bloated pile of legacy code in a legacy language (I would rather go modern C++ the way SerenityOS did, not necessarily even Rust) + the driver problem (new OSes have little option besides borrowing what little there is in NetBSD which seemingly has the best driver model) + optimism caused by numerous alternative OSes projects + plus some functional programmer hubris. I have tried quite a number of alternative OSes and the only thing I can see a problem with are hardware drivers.
that is a really handy gif.
It's such a nonsense idea that Finland and Sweden recently halted Moderna vaccination for under-30s males due to, in the views of their health authorities, the risks outweighing the benefits? https://www.reuters.com/world/europe/finland-pauses-use-mode...
I mean, not really? I’m just a product manager at Databricks who cares about our customers and candidates. Take that for what you will, I guess.
My guess would be that they are required to enforce geoblocking as part of their licensing agreements with the studios.
Bones don’t heal up stronger, and I think you should read the article you’ve linked… it’s about physical exercise to reduce / prevent falls not that it somehow makes your bones stronger.

Physical exercise doesn’t make bones stronger, some physical activity may delay them becoming fragile due to old age but overall actual stresses on your skeleton cause stress fractures they don’t turn you into wolverine.
I am quite sure that you only need to publish the source if you are distributing the GPLed code.
Russia ? Floating nuclear power station
Yeah, you can, but it's pretty janky.
I think you replied to the wrong comment on hiring processes
After a decade of having Krugman's call for more money printing and deficit-driven spending of what hasn't been earned, now they are learning there's inflation. The NYT....
I wonder if radio boxes would be better pixels for DOOM.
Yeah, this was an easy blunder to make, especially if you're inexperienced. Jobs's reaction is the least important part of the story.

It is, as someone else said, about leverage. And board-room dynamics. Jobs probably did not care if it was 50Mi, 150Mi or 1Bi. He cared it was a fair price, sure. But he was there to seal the deal, not to worry about peanuts or negotiate that. He probably didn't even care about the actual numbers if it was under 1Bi.

And after all it's what, 50Mi for a sidebar? They just rebuilt it. It's a feature not a product. Take the money.
> Science is far from an 'anarchic enterprise'. It has the most rigidly regulated mechanisms for knowledge procurement and knowledge dissemination available to us.

> Further, science is a single tradition

Have these rigidly regulated mechanisms been in place for 2500 years? Because if not, that seems like the sort of thing that Feyrabend might have meant by saying science isn't a single tradition.
Of course they could afford it, but would it be good use of money? I kind of doubt a Mozilla-hosted VPN would be much more popular than the Mullvad-based one, and them partnering companies that do a good job instead of competing sounds like not a bad thing.
Yes but these are all problems caused by car-first infrastructure and we shouldn’t over-optimize for edge cases for locations where it “gets so cold the elderly would freeze to death”. I guess I’m not an old person but if you lived in a walkable town are the elderly really freezing to death walking to go get a cup of coffee?

The only reason alternatives aren’t viable is because we actively choose to make them not viable. They’re viable all over the world. Just not here because we’d rather shackle ourselves to oil and debt instead.
Interesting review, credible reviewer.

That said, as noted in the lead 'graph:

SPOILERS

And I don't see how any discussion could avoid same.
> Starting with Chrome 94, Chrome no longer allows HTTP requests to local IP addresses. Since Portal worked by accessing a local server running on your phone to do all file transfers locally over WiFi, this means Portal no longer works for anyone using Chrome. Since Chrome and Chromium variants have overwhelming browser dominance, this means Portal will soon no longer work for the vast majority of people.

The linked post (https://developer.chrome.com/blog/private-network-access-upd...) says "If your website needs to issue requests to localhost, then you just need to upgrade your website to HTTPS". Also, I just tested a Chrome extension on Chrome 94 and it has no problem sending a fetch API request to http://localhost so maybe that's an option too?

Am I missing something?
> Will you give away all your savings and possessions to an impoverished Chinese or Indian peasant?

No, not like that! Only people richer than me should be taxed, because I'm poor and they are uber rich.
> Buddha and Jesus didn't use smartphones made in China, shoes from Vietnam, shirts from Bangladesh or cars from Mexico. Which you do.

> Lmao, you are the generationally wealthy global 1%.

> you only compare yourself to the people around you

> Everything you were saying about the other commenter from your high horse applies equally to you

You keep making these assumptions about me. Could you stop? It's extremely disingenuous.

Nothing I have said denies global trade, or exploitation in the supply chain of consumer goods.

> mind your pronouns though. Talk about us and what we need to do instead of villainizing some other group, like we have no culpability in this.

Friendo, the .1% are fucking us, in myriad ways. One of their most effective strategies is getting people to victim blame themselves; and I think you've taken the bait.
Given it is interactive, he should instead make a virtual touch screen that is connected to the actual hardware that runs a WebAssembly implementation of DOOM in a modern web browser.
I'm a mechanical engineer by trade, but like many others here, have been a "computer geek" since a very young age. We had dialup internet and a 486 running DOS at home in the early 90s when I was around 8 or so, which wasn't very common. I learned python by myself at around 14 /15, in part because I wanted it to do my boring, repetitive math homework for me. I started reading Slashdot around that time. I was also very interested in mechanical things, built a tabletop trebuchet, working on small engine machines (minibike, old snowmobile which I bought by working by working retail at min wage) and eventually chose mechanical engineering as a career path over CS, for no very specific reason (it's tough asking 18 year olds to make a career choice). I kept kept reading Slashdot and toying with computers and eventually migrated to HN with many others around the time of the redesign and acquisition.

Today I have a job I actually love as a mechanical research engineer, which is varied and lets me program and play with electronics from time to time. I still program in my free time, though it's getting scarce these days (as a father to a 2 year old). That works pretty well as a job/hobby combination as programming requires no space and is pretty much free, which isn't really the case of, say, machining robot parts (have access to a lathe and CNC mills at work).

I did try working as a developer for a year ("DevOps" for an accounting software company) but was pretty unhappy and quickly started looking to move back into ME. However, I'd be lying if I said reading about the astronomical total comp numbers that are casually thrown around HN didn't make me question my career choice sometimes.
I hate being that guy? But Bing had this 6 years ago

https://blogs.bing.com/search/2015/09/02/bing-rocks-two-new-...
If you're doing grid search on more than 4 hyperparameters, that probably explains why you think computation wins. Even random search with a constrained budget will do pretty well without breaking the bank.
What kind of designer are you?
Frankly, I wonder if we will ever be completely free from fossil fuels. Renewables have a few problems that need solving.

What do you do when the sun isn't shining and the wind isn't blowing?

Storage would fix that except we don't have a storage solution that scales to the levels we need and is widely implementable yet.

What do you do if the sun decides not to shine and the wind decides not to blow for a long time? What do you do when you exhaust your energy stores?

The only thing I can think of is restarting the natural gas and coal plants. Fossil fuel plants will have to be maintained (and staffed) as a backup. Nuclear will work too I guess but same problem, maintenance and staff.

The only scenario I can see where we rely totally on renewables only is when we have a huge excess of renewable energy generation and a lot of extra energy storage such that it will buy us enough time to look for alternatives if the weather decides to go weird and deny us solar and wind power.
https://archive.is/l7r3n
It doesn't have "blocks" in any meaningful sense, though, largely because it doesn't have mining, because it has no double-spend problem. If two certs get issued for the same site, they're both valid and you want to record them both.

CT is my favorite example of why you probably don't need a blockchain for most permissionless distributed-ledger applications. If you're not making a currency, you probably don't have a double-spend problem at all. For instance, the decentralized package integrity system for Go is based on CT, not blockchains.

The benefit of not having blocks or mining is that the transaction costs are basically zero in both time and energy. One person is running a CT log in their home, and it works as well as any of the logs run by big companies. This is both a practical operational advantage and a way to avoid complaints about harming the planet.

(The big non-currency use case where there is a double-spend problem is timestamping. Here, the two histories of which only one can be true are "This event didn't happen today" and "This event happened today." Blockchains solve this straightforwardly, but you can still address it in a CT-style system - the whole "precertificate" setup is essentially a restricted form of timestamping.)
Fully agree.

I have heard claims that Rust would be performance-equivalent so many times and each time I bothered to check it turned out to be wrong. Especially in video game AI, indirection, pointers and linked lists are common. They are usually used in the performance-critical input-to-frame part of the game and there fitting things nicely into CPU cache lines is crucial for performance.

The end result is that I now have this vague feeling that Rust is a religious cult and I shouldn't take their claims at face value.
looks like geoIP database - for me it gives almost same data as https://www.ip2location.com/demo/
> Certainly it's difficult to argue that since 1973 everywhere that's abandoned the gold standard, toeing the line as it were, has not suffered a sinusoidal cycle.

The same ups and downs existed on the gold standard, but much worse. From June 1919 to March 1933, when the US was on it, headline inflation started off at >15%, dropped to -15%, gyrated between 4% and 0%, was negative for a while in the 1920s, and dropped to -10% once the Great Depression started.

* https://www.theatlantic.com/business/archive/2012/08/why-the...

* https://archive.is/FWKcL

As a comparison, during the post-2008 period, it dipped to for a short period to -1% and then stayed positive but below 4%. 23 times less variance.

> Is there a way to stop a bust in the a post-Bretton Woods?

The busts in the post-BW era are a lot less worse than the busts under the gold standard AFAICT. And as we saw in 2020, large busts can be buffered by dropping rates and increases liquidity on the monetary side, and stimulus spending on the fiscal side.

This is standard Keynes:

> I would summarize the Keynesian view in terms of four points:

> 1. Economies sometimes produce much less than they could, and employ many fewer workers than they should, because there just isn’t enough spending. Such episodes can happen for a variety of reasons; the question is how to respond.

> 2. There are normally forces that tend to push the economy back toward full employment. But they work slowly; a hands-off policy toward depressed economies means accepting a long, unnecessary period of pain.

> 3. It is often possible to drastically shorten this period of pain and greatly reduce the human and financial losses by “printing money”, using the central bank’s power of currency creation to push interest rates down.

> 4. Sometimes, however, monetary policy loses its effectiveness, especially when rates are close to zero. In that case temporary deficit spending can provide a useful boost. And conversely, fiscal austerity in a depressed economy imposes large economic losses.

* http://krugman.blogs.nytimes.com/2015/09/15/keynesianism-exp...
Over-optimizing everything. We’ve seen the negative effects in the supply chain and social media.
The lesson is about leverage.

$50M isn't greed when that amount was already invested into the venture. You accept that offer you're repaying your investors and walking away with nothing.

Apple was leveraging their position to lowball a smaller company. Ultimately the smaller company upset the bigger one, and even the "charity" was withdrawn, and the bigger company used their vast wealth/resources to crush the smaller.
It probably won't do any of that. But it does make it a lot harder to print money and hand it over to the wealthy without people figuring out who is paying the bill.
And CGP Grey - https://www.youtube.com/watch?v=LrObZ_HZZUc
> IIRC it was mostly the initial reluctance of the author to merge PRs that rewrote unsafe to safe Rust.

No, not really. Spinning the actix-web as the author's reluctance to accept PRs is a gross misrepresentation of the problem faced by the project.

The author even went to great strides to explain that his use of unsafe code was indeed safe.

For context, here's what the author had to say about that regrettable episode.

https://github.com/fafhrd91/actix-web-postmortem
Also from https://developers.google.com/search/docs/advanced/security/...

> Don't scare the user. Software must not misrepresent the state of the user's machine to the user, for example by claiming the system is in a critical security state or infected with viruses.

Yet Google Chrome continues to tell users that many harmless executables are malware even after they have been informed of the false positive many times.

Maybe they should prevent people from downloading Chrome instead.
Their foreign policy, their defense and their diplomatic representation is decided by London. They're not sovereign.
Lmao half of SV startups are on python
The point isn’t to be logical. It’s simply because it could be done.
I mean, it hasn't grown to a thousand entries, but https://github.com/openssl/openssl/blob/master/crypto/http/h...

There's also the parameter parser builder at https://github.com/openssl/openssl/blob/master/crypto/param_...

This kind of pattern of repeated application instead of iterating over a data structure ends up fairly common in any code base I've ever seen, public or private. The machinery to build a list loader and iterator always just seems like more code than one wants to write when one is tasked with adding one more element to the existing sequence of homogeneous operations varying the data.
This guy had an inside deal with Facebook for his platform app, yet he claims that Facebook somehow screwed him over and ... wait ... did he really state in writing that he thinks his company came up with the Like button? Oh my God, where do we even go with this. It’s amazing what people will say to look good to others — if Facebook wasn’t considered evil (finally!) I’m sure he’d be telling us of how he was so lucky to have an “insider view” on the company, as so many used to humble-brag years ago.

FriendFeed didn’t really go anywhere but they did in fact pioneer the use of “like” as an interest graph builder within the context of a social network. If you’re at YC, I am sure Paul can tell you the real story on this (which I don’t know myself, but I’m sure it’s good). In terms of the basic concept of the like action, however — there was a failed dotcom (like.com I think?) that really started the whole idea in the web world. Well, that and all of the fake profiles people were creating on Friendster and MySpace for the things they liked, which everyone involved in the industry was noticing as an “emergent behavior.”

This guy’s claim is almost as comical as all of the people who claim they came up with the Facebook Platform, yet can’t come up with a compelling platform strategy to save their lives, or the lives of any of their employers.

I guess Steve was right (and I’m sure he walked into that meeting with some background intel).
I assume the push comes from the original license holders of the content, wanting to bargain effectively with multiple parties region by region around the world.

Back in the day Netflix really didnt seem to care about region blocking beyond the most basic check, and why would they - you pay your subs and you get content.

Being able to get more content by proxying to say the US etc actually got them more subscribers not less.
The elderly drive into town to go to the grocery store. Yes, back in the day everyone grew all the things they needed on their land. I wish this were still the case but with the common availability of stores people have grown accustom to driving to the store to stock up on food. For the elderly and physically disabled that have internet they could shop online if they knew this was a thing and have food delivered to them via someone elses truck. This is by no means an edge case. This is the normal life for 20% of people in the United States. Even in places that don't get cold, elderly are not going to be walking to the grocery store. I don't think we are going to dial back this reality short of a world-war that decimates society everywhere and/or some event that sends us back to the stone age.

I should add that even if we all agreed to turn back that dial and get back to self sustainability it is not something you can just turn on. This requires a few generations for this to be functional for entire families.
Consay’s Game of Life is Turing Complete. Could use Golly’s engine and render using checkboxes. Has anyone implemented MMIX in CGOL?

https://www.bryanbraun.com/checkboxland/docs/demos/game-of-l...
If you would rather listen, Peter Goadsby was featured in this BBC Discovery podcast about his pioneering research on migraine:
https://www.bbc.co.uk/programmes/w3ct1m7t
Yep, the core concepts did not change. It's still relevant.
The City of London has an interesting governance structure. There are two types of voters, resident and business [0].

[0] https://www.cityoflondon.gov.uk/about-us/voting-elections
Oh god, I remember cdrtools. It was such a cool software on the Linux desktop in the 2000s. Converting and Cloning CDs felt simple at Linux where it was notoriously challenging on Windows (I know I know. That's just my impression).

Unfortunately I don't know the other projects of Jörg Schilling.
Actually I wanted to know, which clause says that. Is it Section 4d0?
Really appreciate the open responsiveness. I think most people on this site know the position you are in. Dont be put off by irritated people, it's easy to underestimate how much of waking life some people spend dealing with frustrations with specific bits of software.
Power2Gas scales, it's just a bit expensive right now.
Regarding performance, the opposite side of your question is as relevant, how many optimization opportunities would have been skipped because the C API is too hard to guarantee correct usage [1]? Rust has already surpassed C on the benchmark game, can that be used as data points?

[1]: http://dtrace.org/blogs/bmc/2018/09/28/the-relative-performa...
Says she while having issues decoding json as of 2021.
In most cases, GAN produces a random mixture of features extracted from real photos. That's also why you can tempt GitHub Copilot to regurgitate Carmack's swearing comment.
Use Keap to Grow Sales and Save Time with Automation
C++ is better for performance because it’s old and tremendous effort has been put into optimizing it. Rust is a very young language. It benefits from the clang tool chain and gets some of that optimization for free, but there is a lot of room to make Rust faster.

Unlike GC’d or dynamic languages, there is nothing intrinsic about Rust that makes it a fundamentally harder language to optimize. It’s really like a modern provably safe C++.

It also depends on how you code. If you make heavy use of functional constructs and complex types your Rust code will probably not end up being optimized as well. For tight algorithms it’s good to write “thin” Rust. The exact same is true for C++. You would not want to use a lot of STL or functional stuff in a rendering pipeline core. High performance C++ looks like C.
> Buddha and Jesus didn't use smartphones made in China, shoes from Vietnam, shirts from Bangladesh or cars from Mexico. Which you do.

The semi-ironic thing about this is that it's actually more expensive (in the vast majority of cases) to get shoes or shirts made in the US or a Western European country than in Bangladesh or Vietnam.

In fact, amongst some of the more well off members of my society, the fashionable thing to do is get locally made shirts which cost easily 3-10X what cheaper shirts made by exploited foreign workers cost.
A bit easier but more or less as effective is

redact on pc -> print -> scan

Pretty much as infallible and saves a huge amount of scissor time.
The alternative isn't walking 20 miles everyday, it's to take a bus or a train and only use the car when you need to drive far or transport something big. So like once a week or less often.

At least that's how I use my car. And it sometimes gets down to -25C here in the winter and I've seen over a meter of snow on the roads a few times. Funnily enough - when it happens usually more people use public transport cause a big bus have easier time driving over that than a small personal cars, and besides you don't have to shovel the snow for half an hour in the morning to take a bus.
Doesn't seem to bad, but I'm running on a desktop with 64GB, so I tend not to notice :)

A quick check there shows the vmmem process on my machine is sitting at 1.3GB with one WSL distribution started, which doesn't seem too bad.
Any language that decodes json without issue. I mean it’s _the_ data format of the web ain’t it?
Threatening Letters Written by the Mongol Empire
Sufficiently advanced random mixture of features extracted from real photos is indistinguishable from genuine understanding.

That's why I don't understand this argument. It's not true - you can make the AI generate specific samples, but most samples can not be found in the training data - but even if it was true, it wouldn't prove anything anyways, because you can always say "well the features it copies are just smaller" until the features are just combinations of pixels. It's unfalsifiable even for human artists.