skysight-inc/HackerNews huggingface dataset:
But how many system calls do you allow in your containers? 100? 200?
It's too late. Please of congress person's have already made TENS of millions
Meanwhile Intel is disabling AVX on their CPUs that use efficiency cores.
> You end up defining (-1)^x in terms of sines and cosines

But we are explicitly doing that; we have "nsin" and "ncos" on the other side, and those are explicitly defined as just cos and sin with a scale factor applied to the argument.

The goal is simply, if there is a goal, can we have a nice correspondence between complex exponentiation of some base and the scaled sine and cosine that work with turns.

Hey look; if we change the angle coordinate so that a full circle is just 1 rather than an irrational number, then the transcendental e disappears from our version of this famous equation.
So you're saying that a solar storage system which costs a fraction of a nuclear system is way better because you produce most of your energy during high demand and can move the rest rather than producing most of it at low demand times?
Just because it lets you run that hot doesn't mean you're required to. Just use the eco mode and enjoy still having high performance at lower power.
No, I don't thinkbit is that argument. I think the argument is "Rust has a really steep learning curve". Nor do they imply that everyone who has given Rust 3 months will like it.
When it stops being a lucrative pattern for harvesting emails. Unfortunately.
This sounds like a study that wouldn’t replicate.
I was correcting one thing at a time. We use a 6-axis laser at my work, I’m only hobbiest machinist level at best.
Yeah, I know it's not the same type of math, but it's one of the few things that I still use today. To be honest, I can't think of one time in my professional career that I have needed to calculate the area under a curve to solve a life problem. Geometry has been the most used branch of math past basic arithmetic, oh, and algebra. It amazes me the number of people that don't realize how many times in a day they have solved for X.
Well. MacOs also recently dropped the M1 architecture shift with no warning. Rosetta is more of a crutch than true backwards compatibility
Some interesting meta observations for the few people who read my comment in this already enormous thread. I noticed that opinions on the issue seemed split rather 50/50 until I started seeing the same couple of names over and over on the "no evidence of cheating" side. And in fact, searching the HTML document for this page for a particularly prolific name yields that they make up about 10% of all posts in the thread.

I'm not sure why someone would respond to dozens of all comment threads, but the different tones of voice, presented familiarity with the topic, between posts are disconcerting. I've never accused anyone of being a bot or shill (nor am I now) because I've seen starry-eyed true believers of just about every cause, idea, and entity, but this behavior is exceptionally unusual.
This is why it's not an obvious win for containers over VMs. Existing low-assurance operating systems aren't good enough to trust the basic set of usermode syscalls to be totally privesc-free. But I guarantee you that the set of syscalls permitted to a jailed process on e.g. freebsd has been pretty thoroughly worked over. If a PE exists, it's going to be expensive. It's possibly a smaller effective attack surface than virtio networking, display, disk, etc.
I hear you on all of that, I'm just saying that leadership gets complicated. Sometimes the lie is better for all involved, especially the IC. You recognized this with your first instinct on how to communicate it.

As far as the rewards for poorly-motivated actions, we've always got the long term.
The usefulness of Bitcoin as a store of value is determined by how well it functions as a medium of exchange.
https://clinicaltrials.gov/ct2/show/NCT04916431

https://www.biopharma-reporter.com/Article/2021/08/02/Modern...

https://www.clinicaltrialsarena.com/news/moderna-trial-mrna-...

https://www.nature.com/articles/s41467-022-31130-9
Website builders have their place. They are quick and cheap. It will get you up and running in no time. For many companies, it's a holding spot until they have the resources to create a proper one.
I'd be curious if there's anything people would consider their primary source, I find myself picking concepts from various sources when the need arises.

Here's are a couple from poking around on the topic:

https://css-tricks.com/intrinsic-typography-is-the-future-of...

https://github.com/clagnut/webtypography

https://cssreference.io/typography/

https://type-scale.com/
As a developer myself, I can relate to the author and hope that app review process needs to be reformed to give more power to the developers. As a consumer user, I have to say that I will actually prefer the apps to be updated and usable in my new devices.
> With flags to recover the previous behavior

I'm not sure what flags you are referring to, but that might be because I went from 8 to 11 and skipped 9 and 10.

> the changes of which only broke code using non-public API surface

The APIs weren't non-public. They were publicly documented. They did say they were internal and you should avoid them, but they were still used in libraries and referenced in tutorials and stack overflow answers. And if you happened to transitively use a library that used one of those APIs, it would cause a fair amount of pain when you upgraded.
> at least one of the natural moves here is a blunder

Interesting, I'm not sure if a computer has the ability to recognize something as a "natural move but also a blunder." It would require a very human-like way of thinking about moves, which computers don't generally have.
Create your own Electric Fence Monitoring solution in 3 CLI commands
I’ve heard of par2 through Usenet, but I’ll definitely do some more reading. Thanks for the pointer!
I've definitely experienced that, playing mahjong against a guy who was behaving oddly in the European championships. But all you can do is have strict referreeing and stricter penalties for anyone who is caught cheating even once (which seems to be missing in the chess world given the player in question's record). You certainly can't try to retroactively impose a vigilante penalty that FIDE haven't.
Yes! I built this for exactly this use case :)
Two levels if he isn't cheating. If he is, perhaps 3 or more. Recently magnus played hans on the beach: https://www.youtube.com/watch?v=T1OBEY99inw

magnus completely destroyed hans in two games, as black. I think the ease with which magnus took hans apart in these beach games, presumably added to his suspicion when hans played so much better in the Sinquefield cup.
This seems like an overreaction. We regularly use scanners to detect foreign or hidden objects on people, such as at airport security. It's not out of the question to use such approaches at high level chess where the cost/benefit is worth it.
If you modify this to interpret "everything will be paused" as applying just locally to a single team owning a specific area or product, it sounds a lot more sensible. I've been on multiple teams that organically chose to try an approach like that when faced with growing quality debt. A CTO can globally foster a culture that is applied locally in concrete decisions.
Light travels 300km in 1 millisecond. Intra datacenter latency is not bounded by physics. It is bounded by current technology.
As a co-founder at a startup that spent entirely too much time and effort on the brand site (including multiple redesigns) before eventually getting something up in a few days using Webflow, very much this.
Do you even need to search the HTML? Just a generic find of the browser's search will reveal the same info. Not sure why you'd need to go to that trouble.

at the time I read this and replied, your comment was top of the stack. without reading the full comments, i'm already reading your comment as someone that's got their knickers in a twist rather than reading a substantive comment. so hopefully that's what you wanted?
Maintainer's activity in GitHub issue is also a good metric.
I think that is GP's point: Firecracker shouldn't be considered a general-purpose solution for more secure containerized workloads.
In one of my high school computer classes we'd often set up UT2003 LAN games. I was once called a cheater by someone sitting behind me who, at any point, could have directly observed my every move and corresponding input. I was baffled and amused at the same time. People that lose games have plenty of incentive to claim their opponent is cheating.

On the other hand, as my skill level increased in FPS games it became more and more obvious when one of my opponents was cheating. So IMO you can trust Magnus' ability to accurately estimate the chance of Hans cheating, but you can't trust his motivations for making the claim.

Aside: When you combine high skill levels with cheats that were designed first and foremost to avoid detection, it becomes almost impossible to do detect them. For example in FPS games "aim-bots" are crude compared to "hit-scanners" that simply auto-trigger when your crosshair happens to pass over a valid target. Combine a hit scanner with a player who already has top tier accuracy, and you get super-human accuracy. Let the player enable and disable the hit scanner in real time and they control exactly how accurate they are without any conspicuous appearances. You'd have to (externally) record and sync the monitor's output with a camera that monitors their mouse movements, and even then you'd need EXTREMELY accurate timing - most likely a capture rate higher than the monitor refresh rate.
Yes I am aware it's a hobby project. But nonetheless, same as every mobile project uploaded on the App Store, it should be updated frequently including the dependencies.
Random note: I loved "malicious apps are relatively rare; arguably, Apple doesn’t do a great job filtering them out anyway". We sure are lucky that bad actors only target Android!
HN tends to completely ignore all of the real problems these solutions solve. They live in some fantasy land where organised cybercrime isn’t crippling the lives of thousands daily.
I expect people to hold off the public allegations if they can't prove anything.

I could name specific players who I'm pretty sure were cheating in my own game. I've sometimes had a quiet word with a ref and asked them to watch a particular player closely. I've occasionally had a louder word with a ref and asked them to enforce the rules that are in place to make cheating harder. But you can't pull something like this based off of nothing but your own feelings.
Yes cloud hosted apps are still tested. You will need to let your cloud provide know about your tests or you (IPs) might get banned.
If I could wear blinkers that only block the billboards while driving, I would definitely wear them.

Ad blockers on the PC are the same thing.
Solo travel tips that will broaden your horizons and won’t get you killed
Sounds like you have an ax to grind!

I've always really enjoyed Garmin and their products and their services.

I'm sure they're not perfect but they're an alternative to the Google all seeing eye of sauron.
I’m not at all qualified to say whether what they’ve explored is objectively better, but there’s a ton of opportunity to explore the benefits and possibilities of declarative DSLs. New syntax and exploration is awesome. Cross-compiling is pretty common across many ecosystems at this point, so if the underlying tech is superior using it is still an option with whatever expressiveness a new DSL brings. My question (mostly to myself) is why haven’t we embrace this more?
I think this is another example of the very common pattern of 90% of the contributions in online discourse come from 10% of the population with 90% of post coming from a 1% minority of the overall population. It's not unusual at all.
Kickers have to sometimes tackle, run fakes, kick onsides, deal with mishandled snaps or holds, and adjust for the conditions, like wind or how the opponent is trying to bother the kick. Plus the kick is from different parts of the field, unlike a free throw. But it doesn't matter, since someone taking a free throw has to be already in the game playing. There's no designated FT shooter.
> O(TBs) and O(10^4 TPS)

What does this syntax mean? Surely you wouldn't use big-o notation with a constant in it, especially to convey the same meaning as the thing without the O?
It's a pretty straightforward calculation, which I don't feel like doing right now. But I think Stockfish is going to be pretty power-hungry at the grandmaster level.
So they'll just have other people place the trades? They'll still make money, we just won't know whose trades to look at anymore?
I don't know what you're so angry about, but it's dripping off of the page. no one is angry here but you. why?

CPUs do not have hardware containerization support. they DO have hardware virtualization support.

containers know they are containers, necessarily. virtual machines do not know they are virtual machines unless the platform they see as physical hardware tells them they are a virtual machine, which is not a requirement for virtualization.

CPUs which support virtualization extensions isolate virtual machines from each other at a hardware level. the CPU, at a hardware level, knows about each virtual machine, where its memory is, and what each virtual machine is doing.

for containers, that's all the kernel, and only the kernel. the containers talk through the host kernel to the outside world, and they all share the same OS kernel. that is arguably the opposite of isolation.

a virtual machine host (in reality a sibling virtual machine with special privileges) can run operating system A, and there can be x number of sibling VMs, all running different operating systems; Linux, MacOS, Windows, FreeBSD, BeOS, whatever. they are separated all the way down to the CPU and RAM.

the managing virtual machine cannot see inside its sibling virtual machines normally, and would require escalation to CPU ring -2 (or is it -3?) to become a superuser in the eyes of the hypervisor.

I don't know how to be more clear. if you are still in disagreement, maybe you are unaware of type-1 vs. type-2 hypervisors, and/or you're talking about one while I am talking about another.

others have given up on this conversation and I now join them.
Devils advocate: you are getting you something of value.

What if your company payed you with 1,000 lotto tickets. Do you pay taxes on that only if you win?

Options have a market value so they are compensation
You only log in to google in one container. You use that container only for google. In every other container, you're not logged in.
found the car analogy
> Why there's no universal way to ...

Because PEOPLE.
Did you just agree that you are a toxic manager?
Unless we find some microbes in our little solar system, I highly doubt this. Any civilization able to get to earth is likely to be at least an order of magnitude more intelligent than us.
> I as the developer do something nice for the world. I therefore hope that you, as the user, will pay it forward.

Why do you believe this to be the case? While I applaud the notion, it is sadly divorced from reality. The notion of "nice for the world" or hoping users "pay it forward" is not, historically speaking, part of the social contract.

The social contract has been roughly either "you, the end user, are granted free access to the source code of these programs, in perpetuity, to use, modify or distribute as you see fit, while either preserving or discarding these properties (depending on the license)", or "this body of work is unencumbered by copyright or liability, enjoy".

> people who don't pay it forward, who just see "Free!" and unthinkingly take and take without ever thinking to give anything back, it rubs people the wrong way.

No? It doesn't. If I write some code and slap the BSD or MIT license on it, it's gone. I've gifted it to the universe. That's the point.

I grow tired of this rhetoric that open source is somehow coupled to community contributions and donation based funding. It's not! Sure, that may happen for some projects, and it's wonderful that it does, but it is decidedly not a characteristic of Open Source.

SQLite is Open Source, yet your contributions are not welcome. Linux is Open Source, haven't you bought Linus a coffee?
I think Asia would disagree on keeping grains as a staple.

Processed grains perhaps but again I would be surprised if someone here was shocked that processed grains aren’t great for you.
> So do you want to sift through a bunch of apps that don't work on the current version of the operating system or are otherwise significantly dated?

This is precisely why Google only indexes webpages written in English and are focused on the American market.
But is it, really? A carrier group is very expensive, and you only have a few. Put it here, it's not there. Put it there, it's not here.
And it takes a long time to get from here to there.

Likewise, bombers. Expensive, can be shot down, take forever.
I assumed that's the real takeaway-- they don't really want you logging out if they can avoid it.

I was highly annoyed by the "persistent login via Chrome" thing, because it feels like it breaks the expected seperation of concerns-- the stuff inside the browser frame should stay inside the browser frame.
Agreed. See http://igo.herokuapp.com/
If you lock in a high rate you can always refi down later
> high accuracy machine learning requires massive datasets and it is difficult to get your hands on the data mainly due to privacy concerns. If HE can make data available to be analyzed without compromising the patients' anonymity

FHE is painfully slow. The only real domains it can work realistically are for very simple computations. You are putting the cart miles ahead of the donkey here.
> Niemann, as black, equalized reasonably early on and then had a consistent lead against Magnus the entire game. Magnus did make mistakes in the game, but only after a near-perfect grind for 27 moves.

Of course he played near-perfectly for 27 moves. That's what it means to be a 2700 (or even a 2500, if you think his recent ratings growth is the product of cheating). Virtually any high-level game will look like that - the players playing mostly perfectly, with on average one or two significant mistakes, but sometimes not even that.
"Wanting to invite someone into my brain for the day" really resonates with me.

There is still a stereotype of ADHD as the hyperactive child: running around, yelling, disrupting others. When your ADHD presents as absentmindedness, lack of attention and staying on task, daydreaming and so on it is much easier for it to go unnoticed.

I have plenty of ADHD symptoms that will be noticed by those around me. Forgetfulness, distractibility, poor working memory but it's really just the tip of the iceberg.
They actually sit right next to each other on programming language benchmarks game. Scroll down to CPU seconds, median and percentiles.

https://benchmarksgame-team.pages.debian.net/benchmarksgame/...
New comments start out at the top and sink within a few minutes, only a select few will have that problem.

Ctrl+f gives false positives for name mentions, and searching the html is just as easy. Benefits of having spent so much time dealing with css style/class related bugs, I guess.
You haven't said anything about land, only about labor, so your sentence does not follow. You’ve made a case for why labor inputs might not be directly related to market price, but that says exactly zero about land?
Is this your first time managing people as well?
wow turns out I'm an excellent leader
Love the simplicity and clear description, thanks for sharing!
The problem with not updating dependencies for a long time is that it can force you to make sudden version jumps if something like a CVE is discovered.

At my company we had a real scramble to upgrade log4j when the CVE for that came out. A lot of software was many versions behind. Luckily for us, no breaking changes had been made, and it was simply a matter of bumping the version to the latest one.

That was a lucky break, because if that had been a library like Jersey or Spring it would have been an entirely different ballgame.

If you don't keep your builds up to date, you open yourself up to risks like that, which are unknown and to some extent unknowable.
> If you're in the mobile development space, you have to keep up

> This is the way to get Apple and Google off your ass.

The article author has a full-time job as a mobile developer, does keep up, and is not lazy. Your comment was insulting.

> Yes I am aware it's a hobby project.

You show no recognition that people are busy and have better things to do than to constantly update a hobby project to satisfy Apple's whims.
> So let me put it plainly: the CTO/VPE/Engineering Director candidate should pass your coding interview. In fact, they should excel.

I've interviewed over 300+ CTOs over the last 8 years. I don't think the author is saying this literally, but i'll bite - no the CTO doesn't need to pass your coding interview. CTOs need two capabilities to excel - technical ones and human resources ones. That's it. No need to get any more specific or broad than that because different levels of companies have different needs.

For example, a CTO of a 2-person dev team is also a developer. A CTO of a 500 person engineering team very likely doesn't know that his core infra team just wrote something in Rust and that's totally fine, but they sure as hell should know that they have a core infra team and that they're productive in advancing their core infra.
What is the advantage of adopting any of those, other than being a bit more in sync with other countries? None of them imply anything other than semantic difference, there is very little advantage and a lot of pain if we were to adopt those "standards".
No, I mean that it is physically possible to perform an unlimited amount of computation on a fixed amount of energy, if you are willing to wait long enough. Nobody has built hardware that has this property.
(2020)

No mention of NaiveProxy which I think was first released in 2020.

Instead the authors focus on Shadowsocks, obfs and ScrambleSuit. These have some weeknesses that NaiveProxy avoids.

For example,

https://groups.google.com/d/msg/traffic-obf/BpFSCVgi5rs/nCqN...
Running with friends. I was a casual runner but started doing it with some friends that run 10k almost daily and it had a big impact on me.
Well I think we should consider their experience is different. Many live in either the startup-land where attacks are rare and trivial, or in user-land where the attacks are just in the news, not affecting them. They don't see the daily nation-state attacks, massive botnet operations, spear-phishing campaigns, persistent multi-vector campaigns, ransomware, illicit mining operations, Amazon-laundered cybercrime. They just assume that nobody wants to hack them, so why does security need to be so difficult? And companies don't do a good job of telling people what kind of risks they are shutting down because it would scare the fuck out of people.
2022 CHM Fellow Awards
This is against terms of use here, many of us have been nailed stating similar for other posts. The guideline is "assume the best" (or something like that).
I'm with you Tim, I've tried yelling "THERE IS NO EXCUSE FOR YOU TO NOT BE IN TECH" at every woman I've encountered for the last ten years but they just aren't joining the ranks
Yes, the stockholders lose more value. Every penny you might make in stock comes out of their pocket.
It doesn't apply here, but there are a few app ideas I have where I don't really care about payments or discoverability; I would need use native just because the features are not supported in iOS Safari. For example, here's a list of standards that the Webkit team has said that they have no plans to implement: https://webkit.org/tracking-prevention/#anti-fingerprinting (for me, WebBluetooth and Web NFC are the big blockers).

Until those gaps are fixed, native apps are your only option.