skysight-inc/HackerNews huggingface dataset:
It's especially bad because I can already name a vulnerability. The method used by this program (sending SIGSTOP to the pid in _NET_WM_PID) is inherently broken and can be abused by malicious processes into sending signals to the wrong process, because _NET_WM_PID is set by the client and can be anything. It's completely broken and won't work at all if your process is in a pid namespaced sandbox (e.g. docker container, bwrap, firejail, flatpaks, snaps) because the process inside the namespace doesn't know its global pid.

Suffice to say it's disappointing whenever I see tools built this way, using pids for signaling in a GUI is a really bad idea and should be avoided. A way to fix it on Linux would be to pass pidfds around everywhere, unfortunately that's Linux-only and adoption of it is very slow. Another Linux-only option would be to use the cgroup freezer if that ever gets implemented in cgroupsv2.
If a "modern" high level language is like a shop with machines full of safety features and refinements, lower-level languages are similar but the bandsaw won't try to stop before cutting your fingers off, and assembly is like building by hand (some platforms might give you an electric drill and 50 different saws, others, just a chisel). In many ways, it's easier to think about, but it also lacks the easy guide-rails and labor-saving machinery that make high level attractive.

Assembly will give you the context to really appreciate why higher-level languages work how they do, especially the older ones like C.
Same, but almost everyone I know has been vaccinated. Also, none of the breakthrough Omicron cases I’m aware of were severe. I would rather see data on whether unvaccinated omicron cases are more severe or not, or more or less transmissible.
Imo the crypto is an overemphasized implementation detail. If a genuinely novel product is going to happen, it's a product that would do just fine without the crypto.

If the selling point of your product isn't the product, it seems like you're focusing on the wrong thing
Funny!

My gamer friends love monopoly as a light warm up! A game with adults who know how to play takes ~45 minutes. Auctions are taught affairs, which is really the only decision point, but that’s why it’s such a fast play-through.
For example, the only way for Russian citizens to contribute to Navalny's Anti-Corruption Fund, is using cryptocurrencies. All the other ways require KYC and AML, and will land you in Gulag.
Fwiw, this is an option that many people configure for themselves in cloudflare. Some security people love recommending using IP geo-blocking as a good tactic for hardening systems.
... and Putin has lots of thugs happy to wield USD$5 (RUB 388) wrenches to obtain those private keys, and the globally known precedent of the year-long torture & murder of Sergi Magnitsky to let the key-holders know that there's no way out.
> the dominance has been shrinking

According to what? According to the global charts on Coinmarketcap, Ethereum is still around 20% of the total marketcap of cryptocurrencies (BTC being at ~40%) today, coming from growth since January 2020 (where Ethereum started at ~7.5%). By that metric, Ethereum seems to be growing, but you might have a better source/metric to share?
24/7 operations is the norm these days and I'd be surprised if the client doesn't want redundancy.
Sure many illegal activity goes on on crypto, but as a person who doesn't trust the authorities, I'd still prefer crypto.

Lots of illegal activity goes on fiat too, at least I have more control over my assets on crypto.
Show HN: Devtron – Web Based CI-CD Platform for Kubernetes
Do not use gjournal though, use the more recent SUJ. (I believe it’s enabled by default those days.)
I don't understand this article at all, if you're a startup and you're not worried about tech, you'd probably lean more towards fully managed solutions like Firebase.

Whying God's name would you have to run your own postgres instance on a server when you can take 30 seconds and create one in AWS?.
This right here is enough for me to not even bother tying this OS. I'm always interested in operating systems (and the adjacent config systems that live on top of the Linux kernel, Arch Linux is one of those, Gentoo is another). But I'm not so interested in adding vitriol to my life, no matter the technical excellence. I'd rather live with a mundane kludge than deal with knowledge elitism.
I didn't go all-in with nixos -- and I'm thankful I didn't.

I simply tried using it for local development. I thought that I could replace the various language version managers with nix. I spent weeks working with nix to understand the language, how to use it, and reading as much documentation/blogs as possible.

One really frustrating thing about nix I noticed early on is the lack of support for older language versions. For example, if you want to use something like ruby2.2 you'll get a notice saying that the package is insecure and it won't allow you to install it. They mention an environment variable you can set to get around it but even that didn't work properly. Is my use-case not relevant to nix? Even the simplest requests are met with unavoidable blockers. Frustrating.

Something simple like installing a specific `node` version, corresponding `yarn`, and have it work just as well as `nvm` proved to be a challenge.

I managed to get it working relatively well until I ran into weird issues with native bindings on a project that I have literally never seen before. Issues with `dlopen` and the ilk just made me frustrated enough to post this:

https://twitter.com/neurosnap/status/1485427740610375680?s=2...

I'm not even talking about the final stage of nix where all my npm packages are shasum'd and checked into nix, I'm simply installing two packages: node and yarn. Something this simple didn't work for every project I had. This is all not to mention that I have to add a `flake.nix` and `flake.lock` to every project or create some nix repo where I put all these files.

I love the idea of nix and nixos and really wanted to get it to work. Ultimately it's just not there yet and I'm not sure it ever will be.

Right now, the time you save by using nix is completely lost when you traverse down the rabbit hole of outdated documentation and never ending bugs with the actual system.
It seems less crazy when you think about the fact that actual ground breaking math has been solved on scrap paper and rudimentary writing utensils. Sometimes all it takes is the right person being prompted with the question.
> proceed to do nothing for 10 days

That would be fraud. No, start grep on the source code and a few things like that, then provide the results: "a detailed audit found no reference to log4js, so another audit was started which found no reference to any java code in the C source; it was repeated 5 times to confirm these promising results. Another audit followed the Boltzman brain hypothesis to check if the affected log4js binary code could not be spontaneously generated during compilation, by following a Monte Carlo simulation to check for various length of binary data that would match the log4j binary code. (...)

Finally, to avoid this extremely remote risk, the code changed to switch to reproducible builts, which can guarantee this will not happen"
But you are comparing your own level of knowledge of those two different technologies. Not their individual merits per se.

Have you really spent a similar amount of time learning your way around deploying applications on the cloud as you have administrating your own server?
Because the security underpinning blockchain is either "spend a bunch of expensive electricity and get extra tokens" (proof of work) or "lock up some tokens for a chance to get more" (proof of stake)

These tokens have to be worth something in order for the security to functionally exist. You can't separate the monetary side from the security, because the monetary side incentives the security. And security is the only thing blockchain adds.
The Baltics seems to think so.
> Nobody is forcing anyone to partake in this new technology.

Today. Advocates insist that cryptocurrencies will replace state currencies, that NFTs will replace other forms of ownership like deeds and manage your participation in all communities, and that DAOs will replace corporations and other governance systems.

Many of us think that this world is a worse world, with more opportunities for capitalists and corporations to exert control over our lives and buy and sell every component of our being.

People buying and selling bored apes doesn't affect me. But the reason people buy and sell bored apes is because they believe and advocate for a world where everything functions like bored apes.
for many blogs a high barrier to entry to comments is a priceless feature.
>"Thank you for your reply. Are you saying that we are not a customer of your organization?"

Isn't this the sort of question you'd ask your own side, first?
The Calendar Lifecycle
The stages of calendar gnarlyness:

* Fresh: a few one-on-ones and a team meeting (only found with new employees)

* Filling: handful of recurring meeting and more team communications / sync

* "Stand-Up Square": 30 minute free blocks don't exist anymore. RIP.

* "Director's Dilemma": So many people to sync up. Do thinking work after hours.

* Utter Bankruptcy: better luck meeting with the president. Emergency meetings only.

* Surrender: Nuke the meetings. Start at Fresh.
Microsoft has declined 20% since the new year. Should we abandon that company entirely as well?

Or what about the VTI (total u.s. stock market index) which has also declined 15%?

The truth is crypto currencies such as BTC and ETH are maturing with institutional investment. Their value relative to USD tends to correlate more with the markets and especially tech now.
Nice!! I'm also a FreeBSD desktop fan. It's my daily driver also. For pretty much the same reasons as yourself. I use every platform under the sun on a daily basis (Windows, Mac, Linux, Android, iOS) but FreeBSD is the one that made my daily driver status after I dropped Mac off it a few years ago. The others I use mainly for special purposes (e.g. windows for gaming) and as it's my job.

I agree about the electron stuff, FreeBSD is always forgotten. In some cases it doesn't matter because alternatives are available (e.g. VS Codium). In some cases it's super annoying. Sometimes when you ask the developers for it you can almost feel the rolleyes in their response. Even though it's probably just a tick box in their toolchain.

USB audio works for me but only after I installed pulseaudio. It's a shame having to do that because FreeBSD's sound system is better. But PulseAudio also integrated much better with KDE. With the default sound system I wouldn't see the volume applet in the panel.

For me it was also a big point that it feels less under control of big tech. They're always trying to push Linux towards their own interests. Ubuntu always having to re-invent the wheel trying to insert their own IP (like they do now with snap). Google and Microsoft fiddling with the kernels to make it work better on their infrastructure. FreeBSD seems to be more for the users by the users.

I'll have a look at your boot environment config, I hadn't heard of that yet. Thanks(e.g. Cryptomator) for the idea! ZFS is obviously a major plus anyway. It really helps making atomic backups. I used to use ZFS Send for this, but lately I've been reverting to making tarballs of the snapshot instead because a ZFS Send/Recv stream is really hard to retrieve individual files out of. I wish that was a bit easier. (In fact even tarballs are kinda crap for this because it has to scan through the entire file for every operation :P )

Some other things I don't think you mentioned:

- Rock solid, really. Does not allow you to overcommit memory and freak out (edit: Oh you did mention this sorry)

- Jails. Functionally much better than LXC but sadly lacks the 'docker' ecosystem.

- Very good maintainers that are available on IRC. Both for the desktop apps and FreeBSD itself. No need to sign up for hipster stuff like slack or discord. It feels like communicating with a startup rather than big tech (directly talking to the R&D team rather than putting a ticket in and hoping you get someone with some knowledge this time). One bug I reported on IRC was fixed, upstreamed and deployed the next day. Wow. A small community has its advantages too.

As to what I don't like, modern wifi seems to be a pain. For me it's not important at all as I prefer desktops over laptops and you have to pry the ethernet cables from my cold dead hands. However it getting to the point of always being a running joke whenever you bring up FreeBSD. This really should be fixed somehow. The problem is partly that the Linux community seems to have resigned to accepting blob drivers from vendors. Which obviously won't work for us.
Read the rules and adept your writing. Stop the empty wording and flamebait... it's "disgusting".
And everybody pumping crypto owns crypto, but that isn’t a COI?
I am 100% serious
Which is speculating on the relative difference in inflation rates, not actually investing in either currency per se.
Cheri C/C++ Programming Guide [pdf]
"Comparing runtime, space consumption, and virtual memory footprints over a range of benchmarks, we show that the runtime performance of the best-performing garbage collector is competitive with explicit memory management when given enough memory. In particular, when garbage collection has five times as much memory as required, its runtime performance matches or slightly exceeds that of explicit memory management. However, garbage collection’s performance degrades substantially when it must use smaller heaps. With three times as much memory, it runs 17% slower on average, and with twice as much memory, it runs 70% slower. Garbage collection also is more susceptible to paging when physical memory is scarce. In such conditions, all of the garbage collectors we examine here suffer order-of-magnitude performance penalties relative to explicit memory management."

https://www.cs.tufts.edu/comp/150FP/archive/emery-berger/gc-...
I had similar thoughts when reading it. They're using servers that are hosted by someone else; you don't even know where they are exactly. That is still the cloud.
And that is a stupid argument anyway. Nobody is forcing anybody to smoke, use heroin, gamble, drink excessive amounts of alcohol, etc, that does not mean you can criticize the practice without having to "offer constructive criticism", sometimes, "Just dont do it" is enough.
SQL is closer to C in this analogy. Most relational databases engines don't actually run SQL. They have a native internal programming language (closer to assembly code) that is much cleaner and sometimes more expressive, which SQL is translated into. This internal language is then either interpreted or JIT-ed into machine code. In rare cases, the internal language even has a nice expressive and composable text syntax that programmers can write directly. This makes everything easier and more flexible from perspective of people writing the database engine, even if the intent is to only ever run SQL queries at the public interface.

Most relational databases mostly don't run on SQL anymore, that is a legacy interface that is exported for compatibility. Unfortunately, that is still the only vaguely portable programming interface and everyone knows it, so that's what we use.
If you think of Tinder or Fortnite as your “home” as TFA suggests it’s kind of hard to sympathize.
No one pays for bits moving around on the internet, for the most part. See “peering internet.” Big companies just charge you for it to prevent it from being abused.
> Yes, tell me about not needing the cloud (aka a managed provisioning and scaling service) when your poorly configured database breaks

I mean cloud is no panacea here either. We had a multi day outage of our SQL Data Warehouse in Azure when something broke on their end, and we were stuck sitting powerless waiting for them to fix it. Fourtaunetly for us it was used for offline processing, so the outage just meant we were late delivering fresh data, not fully down.

For those wondering, yes we had backups, yes they were tested so we knew they'd "only" take about 6 hours to restore, but we also had support telling us it was their highest priority and would be back up "soon".

I'm not even saying we could necessarily do better, but I certainly understand why someone might prefer to trust themselves to resolve a situation like this instead of having to rely on a 3rd party that frankly isn't feeling your pain.
As the famous quote says, markets can remain irrational a lot longer than you and I can remain solvent.

And there isn’t an upper limit to who can buy into bad ideas or how badly they can go wrong.

https://youtu.be/lMUtU0tOmNE
Their solution is to change browser functionality? Good luck.
Is it actually equivalent? I know the SQL is compiled from Malloy but I imagine the handwritten version, with comments, would look better in comparison.
Isn't this just the way the unregulated crypto market operates? Volatility like crazy? I think there were other seismic shifts (e.g. Bitcoin) with 50% losses from peaks before.
Elastic beanstalk is nice, but it’s autoscaling is kinda crap sometimes. It’s temperamental for shared load balancers. Logging of docker stacks sometimes works, sometimes auto detect fails and cloudwatch doesn’t get anything any more.

RDS is great, but sometimes there aren’t t3 instances for a month in your region. You can never make a disk smaller.

Bare metal instances are nice, especially when they cost 1/10 an equivalent vm. 10x on bare metal gets you a looong way. Biggest issues I have with hetzner are the lack of 10g enet on most instance types and the funky open vswitch overlay network.
well said, and these companies have way too many lawyers with free time to keep suing you, even if you are right and the judge solves the case in your favour, not always it is required to cover legal expenses and the amount of legal fees burned on it won't worth.

Fixed fee or monthly "support contract", with minimum of 1year.
It seems possible.
Very short, expressed in number of items in the lists. Once N is large enough, these two single-item lists have that:

First list: (N)

Second list: (N + 1)

N = 10^10^15 is large enough for that.

I think you can construct much smaller examples by looking at Pythagorean triples. Since 3² + 4² = 5² and 5² + 12² = 13², the lists (9k, 16k, 169k) and (25k, 144k, 25k) have the same sum of square roots (22√k) for all k. Subtract one from one of the numbers, and you’ll have a close match, say with error e.

Do the same for a second pair of Pythagorean triples, giving you an error of f. Compute a good rational approximation p/q of e/f, and linearly combine the pairs of sets to get any arbitrary small difference (edit: that construction works starting with any two sets of two sets of numbers)

And I don’t think there is an “in practice” for this problem. When do you ever have to make this computation? If ever, does it matter if your code fails on a tiny fraction of all inputs?
Yes, massive fraud by these people: https://www.coindesk.com/markets/2021/07/08/circle-lost-156m...

And that's only what rose to the surface.
The upper 64 bits doesn't contain the permissions directly, but a value to lookup in a PowerPC style hash page table for the permissions, range, type, etc. If it encoded it directly, it wouldn't be an object capability system. It only needs to be large enough to cover the number of objects in an address space that are covered by the scheme. It's 128 bit to then round that up to a power of two for hardware reasons but still have a 64but pointer.

I could see a Cheri V2 that uses multi level schemes for both the object lookup and the offset address to pack it back into 64 bits, but that's added complexity that's not strictly needed for an MVP of test designs.
That's interesting. I help my clients to migrate away from the cloud and they never had the problems you mention. Their financial department appreciates the stability of expenses, though - and the fact that in some cases they are an order of magnitude lower.
As private institutions, they can do whatever they want. Race is a special case since it falls under a protected attribute.

I don't think there's any grounds for asking them to stop considering legacy.
Not quite same but there’s equinix metal and vultr
No analogy is perfect. They are intended to help illustrate a concept to gain insight. Ideally when using an analogy its limits should also be described. Luckily the very first link after the analogy is explained does just that: http://hyperphysics.phy-astr.gsu.edu/hbase/electric/watcir3.....
Ok don't scream at me, but when I see these all I can think of is floating apartment complexes. Especially in places that are being affected by higher water levels and where zoning/lack of space makes more housing impractical. Plus I'd love one just for me...I know it would cost the Earth to reno.....but still all that space and being able to move wherever you want...you would have your own mobile island.
Does taking advantage of the benefits of web3 require users to become operators? Much of the transition off of small self-maintained websites occurred because new users were not interested in being operators, and existing operators were more interested in putting content out than in taking on the perpetual responsibility of being involved in the cat and mouse game against every malicious user on the planet that being an operator entails.

I don't think web3 is dead in the water... I wouldn't even discuss it if I thought it was. But the challenges of creating a new paradigm that displaces the old one aren't technological alone... They're how to solve real problems real people have. What I have seen of the blockchain based solutions suggests to me that they aren't doing much to simplify using the blockchain itself, and I don't think we're going to boil the ocean of converting most web users to even neophyte cryptographers to get them on board with the trust model necessary for the blockchain to help with web3.
By that logic, we're all participating in the remaining 99% of electricity usage. But this isn't even close to being the case. Are northeastern American states being forced to participate in air conditioning because the southwestern states use so much of it? I don't see the reason in that.
Now you're just exaggerating. Are you really saying spending 5-10 mins skimming through a couple of man pages is that hard? Are you saying that a lot of documentation is a bad thing? (I thought FreeBSD fans liked to harp about their handbook..) And besides, there are already hundreds of systemd unit files on your system that you can easily copy and make relevant changes for your own services. Not having to deal with finicky shell features is a major advantage IMO.
This document is incomprehensible. I have no idea what happened here. It seems to be written for a reader who already knows every detail of a saga.
My mistake for the lack of clarity. That's what I mean to imply.
Well one thing it helps combat is link/data rot (assuming that blockchain stays up of course). Meanwhile on our current web, data is disappearing all the time. Like this recent study on the links on NYT articles:

"Predictably, it found that, as time went on, links were more likely to be dead: 6 percent of links in 2018 articles were inaccessible, while a whopping 72 percent of links from 1998 were dead."

https://www.theverge.com/2021/5/21/22447690/link-rot-researc...
As a small startup you need to be focusing on iterating with your (potential) customers, not on how to securely set up a web server.

Most startups are not hard tech problems, despite the very strong desire to make them so by a technical founder.
Right, but if they empowered to move, they have only a limited list of countries to select from. Those countries could be puppet states, corrupted, etc.... So what if one of those countries were to be formed on decentralized, open source principles?

I guess what I'm saying is we should start a new country that will be constitutionally immune to some of the new challenges of modern times.