skysight-inc/HackerNews huggingface dataset:
What you want to read is the kubernetes pod security context fields[1].

In your Dockerfile, add a non-root user with UID and GID 1000, then in the end of your Dockerfile, right before a CMD or ENTRYPOINT you change to that user.

In your kubernetes yaml manifest, you can now set runAsNonRoot to true and runAsUser & runAsGroup to 1000.

Then there’s the privileged and allowPrivilegeEscalation fields, these can nearly always be set to false unless you actually need the extra privileges (such as using a GPU) on a shared node.

Then there’s seccomp profiles and the system capabilities. If you can run your container as the non-root user you’ve created, and you don’t need the extra privileges then these can safely also be set to the most restricted. Non-privileged non-root is the same as all capabilities are dropped.

The tricky one is the readOnlyRootfilesystem field. This includes /tmp, which is considered a global writeable directory, so the workaround is to make a in-memory volume and mount it at /tmp to make it writable. Likewise, your $HOME/.cache and $HOME/.local directories (for the user you created in your Dockerfile) are usually used by third party packages, so creating mounts here can be useful as well (if for some reason you can’t point it to /tmp instead).

[1] https://kubernetes.io/docs/tasks/configure-pod-container/sec...
I've never given much thought to this, but I use Windows at work and Linux at home and haven't clocked the difference. At work I mapped the up-and-right thumb button on my mouse to "Enter" and the down-and-left button to "Esc", which I find very convenient specifically for CAD. I got my mouse replaced when the left click button went bad and took the old mouse home and replaced the switch. I set up the same mapping, and I haven't noticed any dissonance.

The biggest confusion I notice is scroll-to-zoom, where you have a 50% chance of using up to zoom in down to zoom out and 50% of the other way. I haven't found a good way to guess which applications will do which (on my CAD workstation I have one of two programs set to inverted scroll, and I won't remember which one it is unless I run into a new installation).
Everybody is talking about office spaces being empty, but at least in my area the office rent is at all time high which doesn't seem to hint people are using office less(unless office has been repurposed to something else which I don't know about).
Thanks, I haven't been donating to WP but did not know all of that either (apart from the Google employees who are mentioned and linked already in the conversations referenced in this thread).

1 million doesn't even seem that much, but still, yes, nobody knows what donations actually mean behind the scenes (who believes in philantropy anyway?)

I mean, it's clear how much Google and others profit from WP and especially Wikidata already.

But does this mean they control the platform?
Yes, using I/O as on/off, especially on power switches, for sure predates PlayStations.
ryandrake says:

"I remember a guy in my high school whose claim to fame was he dragged some other poor kid into the wood shop and filed his teeth down to nothing with a band saw."

Citation needed!8-))

Sounds like an urban myth (a good one)! Also, it is unclear that the story is relevant to this discussion. That is, one might say that grinding another's teeth with a shop band saw is quite clever, albeit an extremely unsociable (if not psychopathological)
act."
Metal Gear Solid was like this in America also: X is cancel and O is confirm in the menus.
Yeah, Lithuanian is one of the most conservative Indo-European languages.
Mastering PostgreSQL Table Partitioning
That's not a proof by counter-example, that's a proof by reduction to absurdity, and you don't need to make a case for what you're disproving, you just need to show it leads to something false. Whatever argument anyone has towards it being true is pointless and doesn't need to be mentioned.

A proof by counter-example can get even more terse, you simply have to construct an object which breaks a hypothesis. You don't need to consider the incorrect arguments either. Sometimes these proofs are only a sentence long.
Somewhat agreed, I see them as:

PUT - is effectively an "upsert" at a specific url. Doesn't exist? Create it, does exist? replace it.

PATCH - update a resource with a diff, at a specific url.

POST - this is a RPC, in the case of a REST API it can be used to create a new resource where the "id" is not provided and set by the server, it then redirects to the new url.

POST can be used for any RPC endpoints, even as part of a REST api.
Did you watch the video
> Maybe because a lot of our grandfathers lived through the war because they didn’t have to invade the home islands of Japan

I'm sure the American leadership wasn't enthused at the thought of the USSR conquering Japan and establishing a socialist state. Towards the end, the fighting stopped being about WWII and more about what came afterwards.

Without looking at the internal rail network of the USSR in 1944 - I assume the soviets had a leg up (logistically) for an invasion of Japan vs the US; having to hop from island to island in the Pacific.
I’m fine with that, but seeing the term “normies” here sets my teeth on edge.
For quite some time I used plain HTML and CSS to build both my website and blog, served directly by Caddy on a cheap VPS.
I wrote the articles on Notion and exported them to HTML, then made some tweaks before publishing them.

A couple of weeks ago I built a static site generator using Go, Templ and Goldmark so now I can write my articles directly in markdown.
The HTML pages and CSS files are still served by Caddy.

I’m also still using Notion to write the articles but this time exporting to markdown.

IMO, any stack that lets you write articles in markdown is enough for a blog.
The nice thing about JSON5 is, you can move a project from a JSON-based config to JSON5-based config and get a significant improvement in human friendliness without sacrificing backwards compatibility; yet it's a fairly well-documented and well-known format that's not as clinically insane as YAML. It's interesting to see how many people in that HN thread talks about JSON5 as if it's a data interchange format, complaining about things like comments and other features not needed for data interchange, when it's clearly meant to be a format for humans to read/write for things like configs (or they pretend all the problems with hand-editing JSON is trivially solved in the text editor).

I do have a few gripes though. I think allowing so many weird Unicode characters as whitespace was a bad choice. JSON5's reliance on Unicode character classes in general both makes it harder to write a parser and introduces compatibility concerns as different parsers will parse files differently based on which version of Unicode they use. But all in all, JSON5 is pretty nice.

In fact, I recently wrote my own parser for it: https://github.com/mortie/json5cpp.
Whoever’s in charge of planning in SF joins that one judge in the Delaware chancery court in the Frequent Dealer with Space Karen Nonsense club.

This sort of persistent naughtiness can be quite difficult for planners to effectively deal with, though occasionally they get their own back in spectacular fashion; dodgy developers who demolished protected buildings are occasionally forced to rebuild them in full, which has to be quite satisfying. Perhaps they could make him put the twitter sign back.
It hasn't exactly failed. Depending on where you look, it's in the neighborhood of 40% of traffic, although variability is very high.

40% market share isn't really failing, although it sure does feel like it could have been better. IPv4 is still a must, and IPv6 is optional in most circumstances.
I can’t say I have any insight into the sex lives of lesbians, but size seems unlikely to be the driver of that vs. things like empathy, more equal sex drives, and no pressure to get off before the other partner.
Really, communities should start talking to each other.
I would give AWS DMS a try and if not happy go with airbyte or similar.
Despite your best attempts to skim-read and then cake a Hindu-nationalist veneer on it, what you're saying is not even close to what this article is saying, even if it were correct. No serious scholar argues for an origin of the the language tree in the subcontinent or Iran.

Also nobody other than Nazis calls the Aryans "European";

The origin of the Indo-European language family tree is from the Pontic-Caspian steppe region; what is today southeastern Ukraine and southern Russia, roughly from the Dniepro to the Volga. The "Aryans" (really multiple names and multiple peoples) were people who moved eastwards from there, carrying early Indo-Iranian languages with them. (Over a 1000+ year history, winding their way eastwards across central Asia, so I'm not sure how you could spin that as "European")
A lot of those five-year contracts were negotiated before Covid and I suspect they will expire in the next year or two. After a certain point, the building owner will have to choose between lowering rents, or having the building foreclosed on due to having no tenants.

Also, at the beginning of Covid, several big businesses just refused to pay retail rent as a negotiating tactic. It would not surprise me if that happens again.
And we now have hipcc to go back to AMD. Sweet!
A start would be ditching FPTP elections.

People vote with their emotions, regardless of education. But I will concede education helps. However, look at all the educated but gullible fools who still think the Democrat Party is "for the people" compared to the Republican Party. Both parties are for the Ruling Elite. Its just different Rhetoric but same actions and outcomes.
I also think that parent's comment is overly dismissive of LSP. But for me, Emacs with lsp-mode does the things that you describe.
Yes, and? A Python developer needs to learn a different language if they become a java developer. A sysadmin needs to learn Windows if they're going to administer Windows.
Oh, I just realized I'm using https://github.com/d12frosted/homebrew-emacs-plus . I recommend using that over the default formula.
What's New in Emacs 29.1?
its also the case that people want different things. Even if all work could be remote, there will still be people that will pay most of their income to live in NYC or SF, because when you are living in those places you are not just paying for a roof over your head. You are getting opportunities professionally and culturally that do not exist elsewhere
About three or four years ago, I asked the owners of a closed-down department store if we could turn a big chunk of the 4-5 storey section into a climbing wall and was told to F-off as they had bigger plans for a new commercial centre with mixed-work and retail.

Anyway, it’s still shuttered, so good luck with that plan.
Will this work?

define string_length(x) _Generic(x, \
const char * : strlen((const char*)(const void*)x), \
struct MyStringBuffer * : ((const MyStringBuffer*)(const void*)x)->length)
It's weird to begin such an exercise without stating what the point of "the server" is supposed to be. Is it a ... web server? Interactive unix logins for developers? Mail relay? What does it do? This is the key point of the analysis because "securing" a server consists in making it incapable of doing anything not in the set of things it is meant to do. Notably, starting from this side of the problem can lead you away from "standard machine image". Starting with a kitchen-sink Linux distro like Ubuntu is not the road to hardness.
Strange, I'm a radiologist and this happened to us at the very beginning of the Epic transition as well (they also dropped ER MD notes from our profile) but we gave that feedback and they changed it within a few weeks as we used the magic words of "impacting patient care".

This limitation isn't an Epic default feature and must have been set by your institution or whoever created the anesthesia role for some inexplicable reason, there wasn't actually a justification or privacy concern for why this was set this way for radiologists at my institution and seemingly was set by someone in IT thinking it was extraneous to us.
Neutron lithography would be better then. You don't have the charge issue.
Based on what? If it's your dislike of critical theory, that's merely circular.
A Theory of Childbirth’s Evolution May Not Be What You’re Expecting
The easier the job of the police is, the easier it becomes for them to create a police state. We can argue perfect imaginary world semantics all day long, but it doesn't change the fact that in the real world abuse is rampant and power over others is pursued at great cost.

Making the job more difficult for the police costs nothing but money. To argue that we should relax our liberties to make the polices job easier, is to argue that liberty should be erasable by those willing to pay.
I don’t know about the part where Charity mentions it’s really really easy to get an Eng job than a manager one. As someone who got laid off recently, it sure as heck doesn’t feel that way.

And the skills not being transferrable? How is being good in a particular field of tech _more_ transferable than management skills, which is arguably needed everywhere be it tech or not.

Finally the credit/blame - managers and people above them get paid much more than a lowly engineer. Sometimes you get blamed and then paid handsomely, lol.

The hard conversations and emotional drain is true though. But generally, if you love writing code and interfacing with people equally, it’s hard not to be drawn to the appeal of the management position.
Muons are much heavier while having the same charge.
a group i knew found success by renting out dance studios (even day-of in a major city, they usually had a couple hours free in the afternoon/evening), and bringing cheap plastic folding tables/chairs (the kinds you use for picnics) with them

not something you'd use for formal business meetings, but definitely hackable up as your budget allows
In this case it's not so much "popular functionality" as "core mechanism of the protocol". TCP DNS isn't a quality of life feature; it's necessary in order to look up record sets with e.g. lots of IPv6 addresses, because UDP DNS has a sharply limited response size.
Could you elaborate on that or point to any literature/websites because I'm curious to learn about what these have in common. Thank you!
Logging in Ruby: (Almost) Everything You Need to Know
I usually estimate an average amount of hours I can dedicate on the projects a week. Some I strike the limit others(More frequently) while others work less hours
This lack of contrast can be annoying. It can sometimes be remedied on our end by playing with non-obvious graphics settings or monitor settings. But it's unfortunately not always as simple as adjusting the contrast.

You can also point out that this is an issue with photos and people will act like you're using trash hardware even if you aren't (had this issue with my nicest monitor, while the cheaper displays were fine). And they really should be also designing for non-premium displays, or displays being used in extremely bright, or extremely dark settings, etc.
That's because we are in a game of chicken right now.
This depends on how much time you want to spend. If you want the transcode to take less time than the playtime of your videos, it'll probably be best to just use the best hardware encoder you have with high quality settings.

If you have more time, then AV1 is good. Read through the trac page [1] and do test encodes with 5-10 seconds of video to determine what settings give you your desired quality. Note that low `-cpu-used` or `-preset` values will give great quality but take incredibly long. Then, encode a few minutes of video with various settings to determine what settings give you your desired file size.

For human time usage, keep track of the commands and options you use and how those affect the output. If the job will take more than a few hours, write your script to be cancellable and resumable.

[1]: https://trac.ffmpeg.org/wiki/Encode/AV1
In a few days, TomsHardware will also publish the same news.

And Videocardz has already published it.

https://videocardz.com/newz/amd-ryzen-8000-strix-point-apu-s...

"According to Olrak29, the Strix Point APU is expected to feature four Zen5 cores and eight Zen5c cores. On the other hand, the larger APU variant, known as Strix Halo or Sarlak, is said to boast 16 Zen5 cores divided into two chiplets, similar to the desktop version. The primary difference between desktop and ‘ultimate APU’ variant lies in the IO die, which houses the GPU, claims another leaker. The desktop processor will have a less capable GPU, while the Halo variant is rumored to incorporate up to 40 Compute Units, as suggested by earlier reports."
makes me wonder, is the target of native compilation something general like 386 ? can i share .eln between x86 computers ?
My bad:
https://knowyourmeme.com/memes/disappointed-black-guy
How so? Almost all of the criticism is about how JSON5's changes make it a worse data interchange format. It's not meant to be a computer<->computer data interchange format, it's meant to be used in contexts where humans are involved, such as for config files.

Would you think criticism of TOML for having comments would be "right on the money"? No? Then why do you think differently for JSON5?
> Hell, we couldn’t even go back to full-office because our team is so distributed!

Isn't this a problem even for coming into the office 2 days a week?

My experience is that I work on a team which is really distributed. We have people in nearly every continent (including Africa and South America, but not Antarctica), so getting to an office 2 days a week is not an option. We have regular video conferences though.
This is really nice. I may try it soon.

I tested Windows 11 recently and I was really shocked. Apparently, it has two basic themes: my-eyeballs-hurt white and what-is-the-point-of-living black.
Oh, this goes w/o question, but not all F/OSS projects are incorporated and/or can provide a contract. Even more trouble if the entities are in yhe different countries.
But in this case, they want to avoid the human input. So, I guess, it would rather work by reading and copying the intonation of the source voice.
Surprising that the article doesn’t mention the word eXit.
The reason for the low life expectancy of autism for instance is suicide.
When has this actually happened? I think you'd find only very rare exceptions.

It's a fantasy. And it's destructive for the community to replace rule of law with rule of whoever-has-more-guns.
Could it be that the CRT is not inherently anti- (or even non-) conservative? Perhaps the term has been hijacked by conservative culture-warriors as a wedge issue for identity politics in a way that conservative academics disagree wirh? I'm just asking questions here.
Perf/area for the Intel E cores is very good. IIRC they are 1/4 the size of P cores with more than half the performance, and that's not counting any L3.

And Intel is uniting the ISA with future cores.

AMD's Zen cores are (IIRC) smaller than the Intel P cores, and they have a big process/packaging advantage for now, so their "full core" strategy is indeed working very well.
This is very true. And this is what the blog post was advocating too ! It was not about using some smart custom ORM, but about writing dead simple raw SQL queries in SQLPage instead of hundreds of lines of python and typescript.
I prefer this link: <https://en.wikipedia.org/wiki/AC_power_plugs_and_sockets>, since it gives more information, especially the proper names for the connectors, not just the IEC type code. If you want a more official list, use this one: <https://www.iec.ch/world-plugs>.
While I'm sure you are right, I can't help but to be irked by this strange environment we live in where we have to treat business people like infants who need things mashed and mushed into something they can digest and understand.

Nobody had to explain to me the concept of donating to support somebody working on something my business relies on, it's just common sense.

If I was really reliant on books documenting tolls and laws in regards to international trades, and you wanted to give a donation to support this work, I wouldn't be all "me no understand, please explain it in programmer-speak for me".
This is very cool, the Obsidian integration is a neat feature.

Please, someone make a home-assistant Alexa clone for this.
Geographic benefits erodes with technology. Technology has compressed the world, global shipping gives actors with money and leverage access to resources around the world. Post war US power projection is based off the fact it has technology to reach others while others cannot reach CONUS. Which has/is going to change shortly. Now techology like precise long range strikes makes CONUS no better than Saudi. Having resource autarky =/= resource security when modern missiles can take out critical infra on CONUS. Geography matters less than ever.
it's a bit wider and better than eclipse/atom/sublime

there's also the devcontainer and vscode server thing which make vscode a sophisticated commodity

i don't use it, but i've seen the previous eras, the eclipse haydays .. and vscode doesn't feel the same
Have you tried

REMOTE_SHELL="-e \"ssh -i ${ID_RSA}\""

already?
I think JSON5 is great but unfortunately it still doesn't have as good support as JSON even in very popular environments. For example C++ has nlohman's JSON for Modern C++ which supports a ton of formats but not JSON5. VSCode has a JSON5 extensions but it doesn't support JSON Schema, which is a huge benefit. The Python JSON5 module is apparently 200x slower than even the pure Python JSON parser. 1-6000x slower than C!

Given that, I might switch to jsonnet. It seems to have better support, and while it is a lot more complex and includes some crazy anti-features (automatic type coercion - guys it's 2023), sometimes those features do come in handy and it seems to be mostly well designed.

The only big issue I've found with it so far is that it also has no schema support.
It will depend lots on the product/project. In my case the product we built went gangbusters for a decade. I ended up abusing/building Lego kits as form of mindless therapeutics while watching very-easy-to-digest sitcoms to wind down. I have quite the collection now.

Most products/projects aren't like that that though - but perhaps the pressure is still there?
I think I'd have a hard time coming up with a feature I wanted less than this even if I tried.
Once I started reading about these issues a few years ago, I stopped using Alpine as a container base image, and started using Debian (the 'debian-slim' variant). Slim is still larger than Alpine, but not by a lot, and does contain some extra functionality in the base image that's useful for debugging (most of which can be fairly easily removed for security hardening). Debugging random DNS issues is difficult enough; there's no need to make it harder by using intentionally-faulty software.

While I wouldn't call myself a fan of Postel's Law (I think "being liberal with what you accept" can allow others to get away with sloppy implementations over long time periods, diluting the usefulness of standards and specifications), I think at some point you have to recognize the reality of how things are implemented in the real world, and that refusing to conform to the de-facto standard hurts your users.

The fact that the maintainer only caved because the TCP fallback behavior is finally being made mandatory, and not because he's (very belatedly) recognizing he's harming his users with his stubbornness, also speaks volumes... and not in a good way.
Also "peas and carrots, peas and carrots."

Source: was married to a professional actor; saw this used on sets many times.
Anecdotal, but I have also found Twitter DM to be a highly successful communication channel when you need support. I’m assuming that a) it’s the fear of being publicly shamed and b) it’s a channel that’s not made completely unusable through some kind of helpdesk software.
Yes I followed it just fine. You need to skill up.