skysight-inc/HackerNews huggingface dataset:
I wonder how hard is it to escape a unprivileged container as a non-root user in a container. It seems that many CTF organizers already host their RCE challenge this way.
It's not really an excuse if you think about the bigger picture. A sentiment of anti-vaxxers is that pharma and doctors cannot be trusted. And while clearly helping a lot of people, systemic problems with medicine also did a number on people, to pick just one example, consider the Opioid Epidemic in the US.

https://en.wikipedia.org/wiki/Opioid_epidemic
I’ve lived in the EU, USA, and Asia. The primary distinction is that developing countries have corruption starting at lower levels.

However, what this simplistic conclusion fails because the developed countries have huge amounts of corruption at all other levels. Everything is still impacted by lobbying and back channels, in huge multi-billion dollar amounts…
I did the new Robocop which was running a library apparently: https://www.youtube.com/watch?v=G0KIBf-TLoQ But I guess now I have to go back to the original.
REMOTE SR developer / SR Full Stack Engineer with a penchant for sysadmin/devops role

Location: Zagreb, Croatia (EU, CET)
Remote: 100%
Willing to travel: yes
Willing to relocate: no
Languages: Croatian (Native), English (fluent)
E-mail: hn ->at<- incito.hr
Available full time or part time

Hello HN!

I've been online since BBS/Trumpet Winsock days, landing my first dev job way back in 2000. Since then I've done a lot, seen a lot, and built a lot - I've been fully remote since 2007. On several occasions I've built apps from scratch, by doing analysis of business processes on-site and delivering apps that bring order to chaos. Performance monitoring and optimizations are my favorites these days. Willing to do on-call night shifts for PST/EST.

Technologies:

Fullstack (Frontend, backend, APIs, server apps)
Favorites: php, .net (c# or vb.net, web/desktop), vue, jquery
Hosting: bare-metal, Hetzner, Linode, Leaseweb, AWS
Databases: MySQL, MSSQL
DevOps: Ansible, QEMU, HAproxy, ProxySQL

CV and past project specifics available on request.
Ugh, this reminds me of the time my wife was taking programming classes and occasionally would come to me for help.

The only way it felt "right" for me to help her was to guide her into arriving at the solution herself.

So I would start asking questions to gauge where she was at and what she was doing next, then keep nudging her with ever more questions such as "what would you expect to happen if you do that" or "if your program is a series of steps and you want to arrive at step Y, what's the step X that comes before Y?"

It was hopeless. After just a few minutes both of us would get frustrated and give up. She'd often say she just wanted me to tell her what to do. I felt defeated and frankly narrow-minded for expecting her to think exactly like I do.
Added Finland recently! Can you suggest some RSS feeds on the website? Thank you!
You want him and the Ukrainians to suffer a 20 year long oppression/genocide so that you can sleep a little better?

It shouldn't be your place to choose that for them. If that's what you want (and you live in Europe/the West) then why don't you start a movement so Russia can install nukes/bases in your country, then they can leave Ukraine alone.
They are both. Theoretically they can make their own choice, but the are also heavily influenced by systems. So people who build, maintain and execute the systems have a large responsibility too.
Whenever someone claims expertise in a way that is so vague and unverifiable that basically anyone could have made the claim, really, it is not a citation and not a sign of expertise. But it is very sketchy.

In a completely different matter, I worked on high level space programs in the late 1970s and if you had any idea about the information that the government is hiding on extraterrestrial life TO THIS DAY, your hair would stand.
Why do oil companies feel entitled to federal lands. They really are part of the welfare state
No shit, Sherlock. Why do you think we have wall-to-wall coverage at the moment.
> trigger an immune response, which is not something you generally want to do to your readers

In general, you expect readers not live «immune response[s]». It is called "sensation", and you either expect readers to be mature and having learnt to manage it as much as they learnt all other physiological and emotional and intellectual control, or if not mature you want to expose them to the world of serious adulthood for their awareness [rephrased: you do not hide adult behaviour: example must not be missed] - in which "sensation" has no part, replaced by distance, reflection and cool and objective consideration.

It is very odd to consider readers as "prone to sensation" (and that they could be legitimately so).
you know what's really absurd?
you started off with a 50yo source claiming solar has >100 times the deaths of nuclear,
then fell back to claims that they're 'roughly the same' and 'just a small tradeoff'
but go on to say there is no evidence nuclear isn't safe.

I've picked my battle and I've picked a winner. solar has been giving me more power than I know what to do with for years. More than 10% of my suburb has rooftop, there are 3 small grid arrays within 100k, and a 10gw plant being built down the highway that will produce enough untapped energy to kickstart new manufacturing.
WebGL 2.0 is a subset of OpenGL ES 3.0, which last version was OpenGL ES 3.2.

Additionally, even the overlapping subset isn't 100% equal due to the security constraints on the browser.
If Tesla can deactivate Teslas in Russia, they can deactivate for others in west too. For whatever excuse comes in future.
Russia Will Probably Legalize Some Software Piracy to Mitigate Sanctions
Because developing for less than half the mobile market (back in the day) was a bad idea.
https://www.cvedetails.com/vulnerability-list/vendor_id-53/p...
Either that, or be like MFC/ATL and provide a couple of pre-compiled versions for common workflows.
I agree, you can do a lot with C++, there's a lot of advanced libraries for different purposes, but it's simply not pleasant experience, especially, if anyone gets fancy with everything that C++ offers and you need to understand it.

Personally I want to focus on what code is doing, it's also important to understand how it's doing something, but typically I don't care that much about performance, I just want language that will produce valid code without too much effort and thousands little details that you need to be aware of and with languages like C++ you need to pay high attention to code you write and debugging can be horror story, once something goes bad.

For me, if I need to go low-level, Go is sufficient. It's readable, performant and it's harder to shot your feet with it.
I'm pretty sure that those "Got it" cookie consent popups achieve less than nothing. Not only do they not comply with GDPR but the also piss off users where the GDPR doesn't apply.

Also the CSS for the popup seems broken the button isn't properly visible.
> Adobe offered all help

Perhaps too little too late and with a terrible track record.
Two drinks each night versus one is quite a difference. It's double the amount of alcohol!

2 bottles of 5% abv beer has a little less alcohol than 1 normal sized glass of 13% abv red wine.
I don't see any reason for WebGPU outside of the browser, we already have middleware engines that can take advantage of latest Vulkan/DirectX 12/Metal/LibGNM/NVN features, without being castrated in capabilities.
I remember at a lecture in my school, Weiwu Hu, "Father of Godson", said RISC-V "is not well designed". Another reason is probably that since Loongson's debut in 2001, they have gained a lot of familiarity with MIPS ISA. Also, I guess Godson's main customers may be governments, who care more about security and "self-controllable" than ease of use.
> the macOS implementation was buggy and slow

This is actually another lie that has somehow been retconned into the collective narrative. Baffling.

I was a professional Flash developer at the time, working for brands like Nike and Johnson & Johnson. We as an industry used Apple almost exclusively. This was not a common observation until after "Thoughts on Flash"
I don't think they did make that mistake. In Canada at least, if you go from $150k to $225k, you're effectively making $31k more, or about $131k depending on where you live, as an actual employee. Certainly if you make a point of living somewhere incredibly cheap, then that difference will go farther, but the parent here was actually about accurate in saying you'd retain half of the difference. Living in Vancouver or Toronto for example, I'd still not be able to buy a home for quite a long time, and that difference would make a very minimal impact on my lifestyle, if I could hypothetically make that much. It would be preferable to optimize for free time.
Also Luxembourgish, so three + English.
I personally would have him leave if at all possible. A lot of people in Ukraine are regretting not abandoning everything right now.

If that's too extreme, anecdotally the Russian govt seems pretty dependent on Telegram. They've backed down from banning it in the past, albeit in less serious situations. As long as you neither of you ever send anything political on telegram or join any political channels that might be your safest communication option.

On this specific post: I don't speak Russian. Someone on Twitter who claimed to speak Russian said the top of the document makes it clear they're only requiring official government websites to switch to fully domestic hosts. (Don't think this helps much, because who knows what will change in a week)

[I'm not at all an expert]
I am on 88 and planning to stay on it for a while. Mozilla got way off track recently with their pointless UI changes and, more troubling, business "collaborations", so a conservative approach to updating is well-warranted.
I think you're right that I don't do the "normal" implementation quite enough justice; I've been meaning to write a third followup binary search post to "redeem" it. As others have mentioned, you can prove it correct with a simple invariant: the value that you are looking for is in the narrowed range (if it is in the array to begin with). But I think that invariant is harder to write code for, which is the point of this article (maybe I should state that explicitly).

That said, you can only use the +1/-1 optimization when you are searching for a particular element, so you can no longer use a function that returns true/false; you need a third state to distinguish equality. So it's also not as theoretically "pure" as I would like. But not only is it less pure, it's also not applicable to other real problems (see the followup post: https://blog.tylerhou.io/posts/binary-search-revisited/).

That's also why I don't really like it as it makes binary search too restrictive. I think it's a major failure that we teach people that binary search is an algorithm for finding a value in a sorted array—it's really a much more powerful and general algorithm for finding a transition point in a monotonic function from {ints, reals, any totally-ordered set} to booleans. That's another reason I prefer this approach, not just simplicity in implementation.
Why do I need any headlines at all to start my day? Why can't I start my day by focusing on my immediate vicinity and those around me?
"what doesn’t kill me, makes me stronger."

Do enough medicine and you'll see just how wrong this is. Every medical issue leaves damage on your body. Mostly very small. Even fractures, the example often given, yes, a broken bone grows back stronger ... and less flexible, more brittle and heavier, more calcified, with less blood going through it a fact it will not cease to remind you off once you turn 55 or so.
As a UI engineer, I wish it was more common for UI engineers to learn about accessibility and how to contribute to doing UX research, rather than trying to pick up some back-end and calling that "full-stack". There's much more useful cross-pollination to be gained when branching out that way.
Have you tried flash back in the day? It was almost as easy as drawing to make some games.
That's a great set of resources, thanks!

Although, I am still curious from your perspective, what would be the 3 most valuable traits of a senior software engineer?
Cannibalism is frowned upon regardless of your lifestyle choices.
The car has a map + navigation already, and I care very little about documenting events... although I do use the phone during tear downs for the purpose. Still the prime use of the (my) phone is actual phone calls.
Some difficult English spellings differ from their original ones. The original spellings were more logical. They changed as a result of some mistaken beliefs about those words' etymologies: https://en.wikipedia.org/wiki/English-language_spelling_refo...
I had a really good time writing a Vulkan renderer for a project I did. There's _A LOT_ of boilerplate, but there are helpful error messages every step of the way and the API makes sense because everything is explicit, unlike OGL.
Security issues? Yes, there were 0days after 0days. Adobe kept pushing updates, but users were often lagging behind. Researchers continually found new vulnerabilities.

Browsers weren't as sandboxed and hardened as they are today, and flash plugged directly into them.

Flash was one of the most used vectors for adware, all you had to do was visit some shady website.
I'm not at all an expert, but I'd suggest setting up Telegram.

Anecdotally the Russian govt seems pretty dependent on it for their own communication. They've backed down from banning it in the past, albeit in less serious situations. As long as you neither of you ever send anything political on telegram or join any political channels that might be your safest communication option.
> There's a difference between surviving and thriving.

And you have given no proof that a child can't thrive on a vegan diet. Surely it's not something a public health authority recommends, because people generally aren't vegan.

I can't find any study supporting that a vegan diet for infants and children can't be as healthy as a non-vegan diet. There are always outliers, but you also have children on non-vegan diets that are missing vitamins and nutrients.
Love these ones, great mix of soft skills (communication, business) and hard skills (deep tech understanding).

Thanks
This makes a lot of unfounded assumptions about what the police can and would do. There's not a lot the police can do after a bike is stolen within proportion to the value of the stolen bike and bikes are both easy to steal and easy to scrap for parts (that are practically untraceable in most cases). So what do you end up with? More police patrols in "high crime" neighborhoods and more "spot checks" (a la stop and frisk), both approaches that have been demonstrative failures for decades but satisfy the political pressure to "do something".

A better long-term solution would be to reduce the need for policing by mending the socioeconomic conditions that result in bike theft. Rampant bike theft isn't a global issue and is actually less of an issue in some countries that have a lot more bikes on the streets per person than any city in the US does. The difference isn't better policing. Aside from the fringe issue of organized crime, most bike theft is associated with addicts trying to make a quick buck to buy drugs and we already know police isn't the answer to reducing drug addiction.
This is a pretty drastic fix, but if you don't really care about the video and audio files, and you're willing to lower security a bit, you can exclude the library locations from defender. I've done this with a couple of folders so defender doesn't scan executables from local compilation of code. Just remember to scan things when you download or copy from friends.
> It seems to at least not have escaped the attention of biologists/DNA analyzers in bioinformatics

TBF, the sequences they use are probably large enough that I wouldn't be surprised if they redeemed some (formerly) galactic algorithms for this task. It's really no wonder that they've scoured the literature for every optimization available.
The same is true for consumer goods. Every year that passes everything becomes more and more available everywhere (except perhaps when some group has a monopoly in a country and only sells certain brands/things).
Many people use WhatsApp or Telegram. Both let you make free calls given internet access. The first is more secure, but the second is much more commonly used in Russia - it'll be more innocuous looking and less likely to be blocked.

[Not an expert]
I'm not sure this is precisely the case. Any platform, except Windows, was pretty much alien for Adobe and Flash - I recall all the pains of running Flash on Linux, even when support on Firefox/Mozilla side was decent.

IMHO, Flash distribution and compatibility versioning was a mess. When you got a new version, you could not access the previous releases on the Adobe site, at least for Linux builds. Overall, I think Flash's demise was more up to how Adobe managed it.
I have something similar except that it's permanent and only in software (although I love the idea of a red button). I use NextDNS with a huge list of blocked websites. I set NextDNS as my dns server on windows and android so they're blocked on my laptop and phone.

To use one, I have to go to next dns and enable it, then when I'm finished I disable it again. I find this is mostly enough to make my usage mindful.
Being at least 28 years old. Not kidding, well, maybe. In general, "seniority" in many fields in life comes with age; there is no shortcut. It's not very different in IT. Besides the accumulation of experience, with age you gain perspective and become more respectful towards your peers. You'll find many adults who have only one perspective (their own) and that are not respectful to their colleagues: these are not seniors not matter how much they know or how good they are.

Obviously, one also needs to have a bunch of good domain knowledge; but this is independent of age, and it's rather easy to acquire (just work harder/more).
Tell HN: Thailand pass applicants receive malicious code via email
Me and my girlfriend are planning to go to Thailand. Today we got another email from the Thailand pass people (needed for entry):

There is a problem related to the request, please download the attachment and update the information.

Please prepare your documents for submission at the check-in desk and relevant agencies
Passport with visa (if required)
Thailand pass QR code (on mobile device or hard copy)

Download Document

https://bit.ly/XXXXXXXXXXX

important note. You must open the document from a PC and not from the phone

The link is leading to an HTML file hosted on discord, which is prompting the user to download some malicious VBS code.

It's easy to detect for technically apt people, but it almost fooled my girlfriend.
You gain performance by blocking thousands of sockets opened, data transferred and processed.

Host lookup should be O(1) and entirely in memory, so I see zero issue perf. wise to begin with.
Presumably they can take legal action against you if you distribute it and make it harder to access and find by others. Also the quality will likely be lower.
Tower of Babel and babble.
From discussions with vegans I've known, the objection to eggs and dairy is largely based on the (mis) treatment of the animals as part of industrial scale production. It's not (usually) a mystical belief about the sanctity of some life essence - more about observable apparent suffering.
I'm a couple of years short of 40 and feel the same. But these infinite feeds simply didn't exist, or at least weren't nearly as prevalent and well tuned to hijack human psychology, when we were 20.
The US has not run any 'total wars'.
Of course. But we need to figure out how to ensure this in a way that doesn't depend so delicately on Tesla being able to resist pressure from, say, the US Senate.
> [Bicycles are] only portable on the path and inconvenience to other passerby. A real solution should be made foldable, won't taking up public space, lightweight to carry as your bag.

If you think bicycles are inconvencing pedestrians by taking up too much space, just wait until you find out about this thing we call "car".
Wow. How did they succeed so well? Do you have a source?
Also, no integer overflow in Python, so no bug here.
https://www.cvedetails.com/vulnerability-list/vendor_id-49/p...
what would you expect? sympathy for people who should know better?
Programmers are notoriously bad at statistics when it comes to performance.

Run it once, spot small speedup, call yourself a genius. Repeat.
Paul Mason on This Morning:

https://www.youtube.com/watch?v=-pgOX0hT1G0

How he lost his fiancee:

https://www.mirror.co.uk/news/uk-news/how-loaf-bread-helped-...
Wikipedia Current Events is great. But it's just like plain oatmeal and doing exercises every day. Most of us just don't have the willpower and go for the sugary cereals and slouching in front of on screen streaming entertainment, instead of doing what we know is better for us.
The metrics are skewed though because it was all that was available in the browser for a long time.
Sadly I have been thinking along the same lines. Though it's hard to see how Russia could introduce a nuclear device. Yet there is a whole range of bomb types to chose from.. and yes, I think there is a willingness to show anger, which starts with a thinking that puts Ukraine in a position that it should be loyal to Russia, as a matter of honor. Like a wife should be loyal to her husband and otherwise suffers punishment, something we no longer want to be complicit with.

So I would like to hope NATO has intelligence in place that would allow them to intercept the (likely) plane carrying the bomb. The possibilities here warrant NATO to be on high alert.

But as this is likely a system made up of a spring and a mass, its tendency is to resonate to ever higher levels as energy is input. So countries like China need to step up their game to dampen or disable it. For those that are part of the system likely only cause it to oscillate more, until it fails by some level of mutual destruction. Which I don't think is an option China desires.

Note that China controls whether Russia can subvert sanctions, or not. So the conflict inevitably means China needs to rise to the status of superpower, and as it does so, define itself in the relation it wants to have with state brutality, abuse of power and state control of the media.
I think the question of what to do when countries unilaterally invade other countries is also important to ask. The question of international law, and international standards. When the US invades other countries every few years, when Israel carries out airstrikes in Syria or the Saudis carry out airstrikes in Yemen, we don't hear the outrage of the international institutions that we see about today about Russia. What's worse is these international institutions have the gall to suggest that Russia's invasion is some sort of unique violation of the "post WW2 international order". The complete disregard that the US and NATO have shown to international law for the last 70 years have laid the groundwork for the lawless international system we have today.

If we want to be able to credibly condemn Russia for launching an illegal war then we have to stop waging them ourselves and create a credible international standard that all nations are held to. The alternative is simply a lawless system where might makes right, in which case Russia's nuclear arsenal gives them the freedom to invade whoever they want (much like we do). Not only is this a bad system to live in, its an unsustainable system that eventually leads to WW3 and one that we should all strive to reform instead of pointing fingers and ignoring our own hypocrisy.
USA won't let Russia come near the Americas so that won't happen.
France didn't care that Libya was a "sovereign" nation, neither did USA care about Iraq's sovereignty.

Unfortunately that's how the world works, rules are for the weak nations only. Superpowers don't really care.