skysight-inc/HackerNews huggingface dataset:
> Container vulnerabilities are rarely related to memory bugs.

The easiest way to escape a container is through exploitation of the Linux kernel via a memory safety issue.

> C-level memory stuff is absolutely NOT the reason why virtualization is safer

Yes it is. The point of a VM is that you can remove the kernel as a trust boundary because the kernel is not capable of enforcing that boundary because of memory safety issues.

> but there's a lot of magical thinking around the word "safe"

There's no magical thinking on my part. I'm quite familiar with exploitation of the Linux kernel, container security, and VM security.

> the majority of CVEs I've seen in my career are not things that Rust would have prevented.

I don't know what your point is here. Do you spend a lot of time in your career thinking about hardening your containers against kernel CVEs?
> if a good traditional editor gets involved in your project they can make a huge difference in the quality of your books

I've also heard about mediocre editors that waste a lot of author time, and bad editors that ruin the project.
>If the problem is just Apple, then why do modt companies make iOS apps, Android apps and web apps instead of telling Android users to just use the web apps?
Because they're forced to in order to do business since Apple controls their platform?

Hell, there was (and still is I think) even all the ridiculous rules around "can't link to a website payment outside of your app" and "definitely can't tell the user it's cheaper not to buy it thru the app where Apple takes a 30% cut"

I distrust Microsoft and Google as much as I distrust Apple, but damn do people give Apple so many passes "yeah well they use that 30% cut to pay for all the security and services they offer!111" you really believe that? How come so many 0-days & other exploits are found by GOOGLE'S project zero? Does Apple not pay enough for their own research into that stuff?
Record stores that still exist aroud me seem to have travelled back in time, I now feel like the first days of the CD sales, where they were at a corner in a shop full of vynil records.

Also someone is buying those vynil players with bluetooth and USB connectors.
evroc | Front-End/Developer Experience Engineer | London | Full-time| ONSITE

evroc is building Europe's first sovereign hyperscale cloud. We're building both the physical data centers (flagship on the outskirts of Stockholm in 2024) and the platform that will be running them. We're currently focused on staffing up our Software Engineering teams in Stockholm, London and Sophia Antipolis, France, and are looking for 2 x Front-End/Developer Experience Engineers in London to lay the foundations of our Developer Experience offering.

Experience/skill-set: JavaScript/TypeScript, GCP/AWS/Azure or comparable dev tooling, building UIs for a developer audience.

Apply online at: https://evrocab-1692891239.teamtailor.com/jobs/3166084-devel...
Nobody has implemented anything for 7 yet:

https://github.com/redis/redis/blob/unstable/src%2Flolwut.c#...

So it defaults to this function which just shows the version:

https://github.com/redis/redis/blob/unstable/src%2Flolwut.c#...
I said "the idea of using memory safe languages is great!" And "using memory safe languages does not eliminate attack surface". (It's pre coffee here so I appreciate your probe)

I meant that it's over-reach to say it's completely trustworthy just bc it's written in a GC/borrow checked language.
Yes, and git bash is quite useful and built on those. In many ways the most useful alternative - it works and everyone already has it. But not a logical choice if you want to «deploy» something I guess.
SEEKING WORK | Bangalore, India | local or remote with worldwide availability

I'm an independent frontend engineer with over a decade of experience building complex browser apps. In recent years, I've delivered projects using React, Next.js, and vanilla JavaScript.

You can see my previous work at: https://ankursethi.in/work/

Outside of JavaScript-based view libraries, I have a strong understanding of the Web platform itself. I know how to write clean, semantic HTML and maintainable CSS. This allows me to leverage built-in browser features wherever possible, as opposed to building fragile JavaScript-based solutions.

I can help you in the following ways:

- Build new browser applications using React, Vue, or Svelte (I prefer React/Next.js, since that's my main area of expertise)
- Help improve and add features to existing browser applications
- Help optimize the performance of existing browser applications or websites
- Help you interview and hire a frontend team
- Help you build a reusable design system for your company

Contact me at: contact@ankursethi.in

Technologies I enjoy using: JavaScript, TypeScript, Next.js, Tailwind, Supabase/Firebase, Netlify/Vercel

My online writing lives at: https://ankursethi.in

You can also reach out to me on Mastodon at: https://fantastic.earth/@s3thi
SoftBank's Gen Z social media bust: was IRL the next Facebook or a fraud?
> And I work with successful programmers that skipped college entirely and never learned any of that.

I also noticed this and questioned what I have to offer more. But once and a while there is this complex problem, and then you can see that some developers run into their limits, while others (mostly university degrees) can go further.
Also likely because instead of some schmuck they now have to extract cash from a corporation. Which isn't profitable.
I think you're correct about the worst case being O(n) but it's behavior heavily depends on the access pattern of the cached items which makes it hard to reason about.
If anyone has stories of or suggestions for where to emigrate to from the UK I'd be interested.

The news of ever increasing state surveillance, rising inequality, low salaries, privatisation leading to sewage filled waterways and the deliberate destruction of the NHS, revolving door cronyism and the weather contribute to feelings of dissatisfaction.

Maybe the grass isn't actually greener elsewhere(?)
I thought these devices were called pipettors not strictly micropipettes?
Is there maybe a subset of Linux applications that it could run soon? A proxy, nfs, some database server, http server, firewall?

I think it doesn't need to run Steam, libreoffice and Firefox to be useful. Many parts in a common server or microservices architecture are relatively simple in what they do and would probably benefit a lot from a safe, simple kernel.
How Many Different Games of Tic-Tac-Toe Are There Really?
> We're also

not clear from the comment but the statement is that France is less a problem wrt to surveillance? Or some other place?

fresh from this year's 37C3: A year of surveillance in France: a short satirical tale by La Quadrature du Net https://media.ccc.de/v/37c3-12309-a_year_of_surveillance_in_...
I know it's the curmudgeon NIMBY in me, and I love Rust and use it daily, but it's starting to feel like the worst of the JS crowd scribbled in grandpa's ANSI C books just to make him mad.

I am super happy with most features, but demand is demand and people demand runtimes. As a chimera it perfectly represents the modern world.
Thanks a lot for all the development of Optaplanner over the years! Your work is really amazing and valuable.
Ai can even track you through your photos too

here is the article about it
https://digialps.com/ai-can-now-predict-your-locations-throu...
There are open source developers out there who literally write installation instructions like these in their READMEs:

curl http://example.com/script.sh | bash
I admire the dedication to the theme. It even extends to the code: https://gitlab.com/stavros/imgz/-/blob/master/main/views.py?...
Alternatively, we can go the other way, and dispense with the arrow:

\x \y x + y

rather closer to the lambda notation in maths, and works well for compact expressions such as S from the SKI combinator calculus:

\x \y \z x z (y z)

This looks much better with syntax highlighting (hard to demonstrate here of course), being both trivial to implement and informative - just have the back slashed tokens in blue or whatever.

Cassette looks really nice - great intro page, and a great name too! Making something simple is much harder and more valuable than making something complicated.
> Respectfully, do you know what a container actually is?

I am extremely familiar with containers, the linux kernel, and virtual machines. In particular from a security perspective.

> The kernel itself does very little to prevent containers from interacting with the host (yes, via syscalls) in a way that affects other containers or the host itself.

Namespaces, such as process namespaces, file namespaces, user namespaces, etc, will prevent a container from interacting with another container without even getting into the fact that you can leverage DAC to do so further.
It still spreads your opponents resources thinner, from a strictly game theory perspective.
>> Memory safety isn’t why containers are considered insufficient as a security boundary.

> Memory safety is the primary issue with containers as a security boundary.

"No it isn't" "Yes it is" "No it isn't" "Yes it is"
Makes me feel like the current timeline isn't right.
The road paved with good intentions and all.

Sure, users are 1-bit entities in need of protection, no questions 'bout that, but also given that premise they are best served by good software that helps them get their job done. If a kick ass GPL software can do that, great. They will even pay for it. If not? They will pay for the non-OSI one that bundles the GPL and will laugh at GPL enforcement attempts.

Licenses are intellectually cute, but unless it's well-enforced AGPL3++ it doesn't matter much. (See the recent thread about 3D printer https://news.ycombinator.com/item?id=38768997 )
Definitely valuable constraints!

I'll definitely have to think about how to incorporate such things in a simple to use manner.
It's definitely a mood.
The UK sales data (if that's what they have) actually can tell you the route in some cases. This is in fact a bad thing, so let's explain...

Britain has repeatedly elected Conservative Party ("Tory") governments, the Tories have an ideological preference for the Free Market, regardless of whether that makes any sense. So, instead of a single nationally owned and likely unprofitable railway industry, it is divided into a lot of separate elements that in theory could be profitable but in fact take enormous subsidies to keep around, for our purposes we care about just one of those elements, the Rail Franchises, a whole lot of separate companies which undertake to provide passenger journeys on set routes and employ staff to operate trains, provide custom services, hire the rolling stock and so on.

Originally these Franchises were supposed to compete for passengers. But if they provide unrelated routes obviously that's not much "competition". A route from Leeds to Glasgow isn't in any meaningful sense "competing" with a route from Salisbury to Cambridge. So OK, what if they're competing only where the endpoints are the same? Well, the immediate problem is that the customers don't want to buy a ticket for "Bob's Railway" they want a ticket from one place to another and couldn't give a shit who provides that journey.

So the franchises "fixed" this by creating special tickets with weird rules. For example instead of a "Bob's Railway" ticket you make a ticket which requires passengers to travel via Tinyton, a small town nobody cares about but which is served only by Bob's Railway. Do the trains stop in Tinyton? Technically yes they do, but you'd barely know it, this is mostly just a way to satisfy the requirement that "Via Tinyton" means "Only use Bob's Railway" and so Bob's Railway can claim 100% of revenue for these tickets. That revenue doesn't actually matter any more, for a few years now the government just takes all revenue and pays the franchises whatever they want instead - but the pretence of competition must remain, because you know, "Free Market".

The result is that tickets are needlessly complicated or incredibly expensive or both, indeed if you're not using software or a specialist human to help plan your journey you will probably pay far more than you should and you might have a terrible journey anyway. The Tories love to say somehow the "Free Market" is going to fix this, but of course the correct fix is ideologically impossible for them, "Take the railways back into public ownership" is at once cheaper, more practical, and completely unthinkable thanks to ideology.
I suggest starting by deciding what you do care about, since it's not the money. What does "producing quality works" mean to you? How do you measure it? If you write only for yourself you can be your own judge of quality. Or do you intend to measure your success in readership, or reviews?

If you decide you care about getting people to actually read your work, the next step would likely be narrowing down your genre and checking out what is doing well in that genre and niche. Look at Amazon top 100 lists for your categories, for example. What's selling? What's getting good or bad reviews? Open the Look Inside previews of the books. What POV are the stories written in, are there any patterns you notice in successful covers or blurbs, etc?

If you don't already read in your chosen genre, you probably want to start. At the same time, you can start writing. I'd personally suggest starting with short stories or novellas. Something you can finish and put out there asap to get the feedback loop going. Self-publishing is low barrier to entry, but there are a lot of balls to juggle. Each thing you put out will provide more information for your next book.

Before publishing your first book, decide if you want to go into Kindle Unlimited (Amazon exclusivity) or "wide" (publishing to all retailers). There are huge pros and cons of each, and some genres are better suited for one or the other. KU can be easier to get traction and start seeing page reads with, but it has its cons as well.

Also, decide if you want to use a pen name.

Try not to get too attached to the first stories you publish. They will probably suck. Personally I would not bother spending money on an editor or cover designer when you start out, but it depends on the genre and your own budget/priorities.

From there it's basically about iterating on what you have with every new book. There's way too much to cover in one comment and more specific genre-based strategies depending on what you're writing, so this is more like a dump of my general thoughts for someone starting out.
I think it's wrong to say that nothing is being done to investigate them.

However there's a weird thing that I've witnessed. Large crimes are being ignored and instead non-crimes (or minor-crimes) are blown out of proportion. Then the investigations consume all the oxygen eventually sliding off the ruling party like water off a duck.

A rotation of cabinet, a new face to lead and all is forgotten it seems. Faith in the alternative parties is also shockingly low (not that I am a labour supporter under Kier.. but that's also kinda my point).

People would rather lurch even further right for answers, many people loudly supporting "Reform UK" which is the political refit of "the brexit party" and even before that was the "UK independence party"- a purely populist party.

HOWEVER.

The UK has been on the decline since 1992 (or earlier) and managing a nation in decline must be extremely difficult. Nobody is willing accept that they're poorer, financial services need the pound to remain strong so they keep the currency from falling which in turn makes everyone unable to afford to live.

It is a sticky situation with no clear answer other than to muck down and face the reality that if we want to be a wealthy nation again we either need to go back to exploiting other countries or produce things of value.
I like these stories. I had a budget of $350 for our marriage and honeymoon. That was including gas money.

We did the honeymoon first though- went to a rural town and stayed at a b&b while we waited the three days for the marriage license. Then went out for ice cream and drove home.
Kata is an attempt at solving this problem. There are problems:

1. If using firecracker then you can't do nested virtualization

2. You still have the "os in an os" problem, which can make it operationally more complex

But Kata is a great project.
It's curious that you should think that, when the aim of the language is to reduce bias and put the reporting on a neutral basis.

In terms of Orwellian control of language, you'd be better off looking at the behaviour of the automotive industry of the 1930s: https://www.vox.com/2015/1/15/7551873/jaywalking-history

It's also notable just how much the media industries are influenced by car manufacturers due to their high advertising spend (e.g. "stop publishing articles about active travel or we'll stop our advertising").

Reducing car use is an entirely logical goal as getting people to walk for short journeys can drastically improve the health of a nation as well as improving the air quality and drastically reducing congestion - it literally helps everyone (except for those involved with selling/fixing cars).
Thank you for the kind comments! Unfortunately, the BLC interpreter is much slower than MalbolgeLISP, even when using fast20 (with a lot of optimisations coined by dzaima). My memory is a bit hazy, but one of the main roadblocks that made BLC barely feasible was the (comparably...) large ROM that it requires. Executing simple instructions in Malbolge generally incurs similar kind of latency as the more complicated ones, hence to slightly improve performance (not nearly enough - notice that the Lisp still has a "loading bar"!), I have decided that a complicated set of primitives for a language to run on top of Malbolge would be a necessity. This is further supported by some issues with Malbolge regarding the code placement and loading a code image, previously solved by e.g. Matthias Lutter (and subsequently used in my Malbolge code) in his very simple (and if I remember correctly, slower than the LISP) brainfuck interpreter. Another venue to explore is University of Nagoya's Malbolge toolchain, which is functional and probably a very good starting point - https://www.trs.css.i.nagoya-u.ac.jp/projects/Malbolge/. Once you jump this hoop, you can now start synthesizing basic operations using Nop/MovD;Jmp flags and Malbolge instructions - e.g. have the interpreter code set a flag, jump to a single routine which does a complex operation; based on the state of all flags the routine can then decide where to return. The more complex the instruction set, the more complex the primitive operations, and hence the better is the performance you may get. Assuming that you do not exactly want to write an optimising compiler in Malbolge which does something akin to mop-fusion of RISC CPUs, of course :-). Most of MalbolgeLisp was written when I was 16, then I have moved onto KamilaLisp (Java), as the codebase written in Malbolge grew in size and became more annoying to add interesting features to. Unfortunately due to job and university requirements I no longer have the time (and motivation) for these kinds of amusement.

As for the compression: probably an artifact of a bigger block size and a closer-to-optimal entropy coding stage in bzip3 (simple model + binary arithmetic coding; fast suffix sorting due to research of Ilya Grebnov) vs bzip2's suboptimal implementation of what could have been Package-Merge that currently assigns excessively long Huffman codes (as I discovered while doing research for my data compression book); also probably the RLEs everywhere that Seward considers a mistake, small BWT blocks, etc. You could try the tool https://pastebin.com/6DUKs4q9, which eliminates the redundancy associated with the Malbolge encoding (which bzip3 kind of catches on without any preprocessing, while bzip2 not entirely) and drastically improves performance of all other compressors:

% ./a d <blc.mb >blc.n
% bzip3 -vfb50 blc.n
blc.n: 48175489 -> 647179 bytes, 1.34%, 0.11 bpb
% bzip3 -vfb50 blc.mb
blc.mb: 48175489 -> 1025582 bytes, 2.13%, 0.17 bpb
File IO seems to be the problem. I’m guessing antivirus + virtualization overhead. Don’t see what I can change about that (use linux, sure).

Docker is still useful, it’s great for sharing a complicated setup across machines.
Location: Amsterdam, the Netherlands

Remote: yes, hybrid or in office

Willing to relocate: no

Technologies: Python, Kubernetes, Docker, React, Typescript, JavaScript, CI/CD, observability tools

Résumé/CV: https://bille.dev/assets/cv.pdf

Email: thomas@bille.dev

Engineer with 6 years of experience from Backend engineer to Engineering Manager at Canonical, the publisher of Ubuntu. Currently looking for new opportunity in office in Amsterdam or remote. Passionate, transparent and proactive are the skills that would define me and my way of working. I love working on products from their definition, their build, and iteration. I am available immediately, feel free to reach.
Back when I had to develop in C, I would routinely wait for 1h builds.

The trick to make them faster is the same as with C++, never compile everything from source unless required, this includes template code for common type parameters.

As for compile times see Microsoft Office modules migration, or that VC++ import std in C++23 is faster than a plain #include <iostream>.
While I'd say so, I don't think in the medium future it would have made much difference.

China wants ensure control over strategic elements anyway. I suspect that the west has started betting on China intending to primarily rely on domestic production. Possibly to preempt the future, avoid companies getting entangled further, and slow China down even if just marginally, the west has settled this policy. I say west but this is more a US thing, Europe was more reluctant to follow it.
People have reasons, personally I don't like placing the burden of a viral license on people. I don't write code to further a copy-left cause, I write it to build things and make it easier for other people to build things.
The premise of my post was "imagine a memory safe kernel". I repeatedly use the word "imagine".
This seems to behave oddly in Firefox desktop (but fine on mobile). The Content Security Policy is blocking the image from loading.

Console complains about:

Content-Security-Policy: The page’s settings blocked the loading of a resource at https://media.githubusercontent.com.x.e4303b4d0615604a6b08d9... (“img-src”).

The image doesn't load and network tab complains about `NS_ERROR_DOM_BAD_URI`.

But the URI looks OK, example: https://media.githubusercontent.com/media/anisotropi4/kingfi...
I came here to post that. Totally uncalled for and not funny in the least. It is also not fitting at all.
I’m interested of reading more. Where can I find the blog posts?
Can't it be because of links to x.com?
Telling you that you're factually wrong (which you could easily check yourself in 1 minute) and that you should not jump to correct people on the Internet, propagating wrong information without considering they may actually be right, does not amount to being nasty.
Yea for most of the social conditions, you can probably already use the "Separate/Link" feature.

Similar to hermitcrab's comment, I'm not sure about the right/left handed-ness. As I'm currently at table level, rather than seat level, I think it's something that can be figured out at the table level later.

Thanks for the feedback!
My takeaway from those games was that a game should either stay split screen or stay shared screen. (Personally I far preferred the older LEGO games that stayed shared screen.)
I expect it's likely more of "memory safety in a language doesn't make it _safe_, it makes it less vulnerable". It removes _some_ issues, in the same way that a language with static types removes some ways a program can be wrong, it doesn't make it correct.
The US is trying to starve China out of advanced semiconductors, not sure this will end well (For Taiwan).
I've interpreted that as the user community, because your statement would be a tautology if it were the free software community instead.