skysight-inc/HackerNews huggingface dataset:
Conversely, it means that the software can end up in places it wouldn’t otherwise. This could be better for consumers if the alternative is a poorer quality library with a more permissive license.
I think they meant "we're a strong contender in the race to the bottom".
Track, showcase, & connect your Startup with Investors with a free KPI Dashboard
Founded a startup? Want to connect with potential investors? Want to track & broadcast your progress with a free dashboard with industry KPIs? Then Launch Lens is for you.

Reserve your startup's dashboard through the link
Jump on eBay looking for the soap dispenser for that model of dishwasher. You might find a whole replacement dispenser for that price.
It doesn't have tough surveillance laws, it's got permissive surveillance laws. Tough surveillance laws would mean laws that were tough on the people doing surveillance.
Slightly O/T but am I the only person sick of seeing the word “every“ followed by the word “programmer”?

I realise this might be because I’m a very experienced developer, and these things are not interesting to me, but it always seems anything titled this way is often incredibly dogmatic.
Wow! Thanks for responding, and providing such an awesome answer.

Yes, that sounds very much like a lack of "static", which makes it even more confusing. It sounds unlikely that someone would start a browser project in C and not know about static.

I would not agree that it reads "better", it just makes it more random. Adding a letter that at least hinted at what was meant would have been better, if we're for some reason are limited to a single letter (like "p_" for public).
WAT, indeed.
> Memory safety is the primary issue with containers as a security boundary.

I don't know where you're getting your information, but this is NOT the consensus on the LMKL, among most Linux kernel people or at any serious large scale tech company.

If you wish to learn about this stuff, lwn.net has a good series of articles on the problems people are actually working on. Most of the problems are related to namespace confusion, privilege escalation through, e.g. block-level access to the filesystem, etc.

> Sometimes the issues are not memory safety ones! But many, most are.

Huge citation needed. In 15 years of security, 8 in Linux kernel security, I have seen maybe one practical exploit related to containers that boiled down to a C-level memory issue.

> That's on you, but I'd be happy to explain more to you if you have questions.

No, you're very confidently stating things that are at the very least debatable. This thread has people doing kernel security as a day job.
I thought this was going to be about gaining efficienc by re-using rays when both players fields of view overlap...
I guess it very much depends on any definition of "the community" then.
> I wasn't attempting to veil it at all. It is a control issue.

Then do not hide it behind the "people just want to scratch their own itch". It is a bad rationalization for a much deeper issue and the way to overcome this is by bringing awareness to it, not by finding excuses.

> wants to keep some hold on the core direction.

You are really losing me here. The point from the beginning is that the idea of "direction" is relative to a certain frame of reference. There is no "core" direction when things are open. The very idea of "fork" should be a hint that it is okay to have people taking a project in different directions.

> it would be much easier to just not open up.

Agreed. But like I said: you can not have both ways. If you want to "keep control" and prevent others from taking the things in a different direction, then keep it close but be honest to yourself and others and don't say things like "it's not ready to be open yet" or "I want to share it with others but I worry about losing recognition".
This! I am horrified to touch anything old from GNU!
This is getting a bit defensive. I think people are interpreting your post as saying all safety is guaranteed by using memory safety, but you rightly walk it back in comments to mean it addresses "primary" security problems.

That's it.
Why are you 12% more likely to run a marathon at a milestone age?
I wonder if a numeric in a file extension would cause problems in some systems or violates some convention.
Yep. And tooling to secure C improved a lot in recent years. The Address-Sanitizer is a big improvement. I’m looking forward that C++ improves as language itself because it was already improved (smart-pointers, RAII, a lot of edge cases regarding sequencing) and they seem to be willing to modify the actual language. This opens a path for project to migrate from C to C++. A language inherits a lot from its introduction (strength/weak) but also changes a lot.

Every interaction with hardware (disk, USB, TCP/IP, graphics…) need to do execute unsafe code. And we have firmware. Firmware is probably a underestimate issue for a long time :(

Aside from errors caused by undetected undefined behavior all kinds of errors remain possible. Especially logic errors. Which are probably the biggest surface?

Example:

https://neilmadden.blog/2022/04/19/psychic-signatures-in-jav...

Honestly I struggle to see the point in rewriting C++ code with Java just for the sake of doing it. Probably improving test coverage for the C++ implementation would have been less work and didn’t created the security issue first.

That being said. I want to see an #unsafe and #safe in C++. I want some hard check that the code is executing only defined. And modern compilers can do it for Rust.
Same applies to machine-dependent/implementation defined code which isn’t undefined but also can be dangerous.
Tecton | https://tecton.ai/ | Various roles | Remote (Americas), or Hybrid (San Francisco/New York City) | Full-time

* About us *

Tecton builds a data management platform (a Feature Platform) to help enterprise customers create the best AI products by solving the most difficult problem in ML: the data. We provide developer tools and infra to accelerate up the production of models for batch and real-time ML.

With our platform, teams can refine contextual data for AI products, obtain scalable cloud infrastructure to ingest and serve it at scale, and have a centralized knowledge management and data governance system.

Learn more at https://www.tecton.ai/

* Careers *

Tecton is currently hiring remotely all over the Americas (North, Central and South), and with a hybrid model in SF and NYC (come to the office as much as you want).

Some of the challenges our Software Engineering team is tackling now include:

- Building the Rift compute engine to allow users to make ML applications WITHOUT Spark: https://www.tecton.ai/blog/unlocking-real-time-ai-for-everyo...

- Creating cloud abstractions to allow our product to be used agnostically across many environments: https://www.tecton.ai/blog/announcing-tecton-google-cloud-in...

- Tackling the unexplored challenges of enabling real-time ML at scale: https://www.tecton.ai/blog/common-challenges-real-time-machi...

* Find our open roles at: https://www.tecton.ai/careers/openings/ *
https://web.archive.org/web/20221130205026/graplsecurity.com...

The company no longer exists so you can find at least some of them mirrored here:

https://chompie.rip/Blog+Posts/

The Firecracker, io_uring, and ebpf exploitation posts.

Chompie was my employee and was the one who did the exploitation, though I'd like to think I was at least a helpful rubber duck, and I did also decide on which kernel features we would be exploiting, if I may pat myself on the back ever so gently.
Funnily enough, Steve Jobs/Apple didn't even want an app store or native apps to begin with. It was gonna be only preinstalled apps + 3rd party web apps. Hell he had to be convinced to even allow non-Apple 3rd party apps in the first place.

I don't think web apps are the future, but I also don't see why there can't be a more protected mode/sandbox for non app store sourced content to run in. Nobody has solved this yet - why can I visit pretty much any website and (mostly) be completely safe, yet I can't install any old random APK?

Hell, it should be possible to jump from the web into native code with a single click by now, why tf not. The only good thing the app stores are good for is to serve up apps that are "more trusted" (even tho app stores constantly have a couple bad actor apps on em) as well as centralised place to easily find stuff (the reason people use Google).

I guess the real problem with sandboxing/permissions systems is that users don't know what's good for them; my Tiktok loving friends would just hit "yes, yes, yes" to any dialog that says "TT wants to know your shoe size".
On the other hand, the very clear deadline on the now-revoked license caused Chinese chipmakers to panic-buy record levels of Dutch equipment and ASML's Chinese competitors now have the problem that their potential customers have smaller budgets left for them after those purchases...
Perhaps, but there appears to be an obvious convergence of Android toward iOS’s user interface idioms.
Trying to crowbar nuclear in here is ridiculous; the UK has been a surprising renewables success, despite everyone's best efforts, and we're still waiting for Hinkley Point C to be finished.

> could afford to manufacture stuff locally

"UK manufacturing sector climbs to eighth in world rankings"

https://www.themanufacturer.com/articles/uk-manufacturing-se...

No, the surveillance stuff is pure elite politics and not driven by freezing pensioners.
Nordic countries are still relatively nice. And very receptive to "skilled labor" immigration due to the population aging fast.

We too are circling the neoliberal drain like UK but are perhaps a decade or so behind. And racism is rising rapidly. :(

I'm from a Nordic country but have lived in England. To be frank, in many areas it's a real shithole country, and I'd really not want to live there. Not as bad as USA but getting there fast.
I am not an AI skeptic, I participate in projects that make it possible to develop and use large language models in languages other than English. However, I am increasingly drawn by specialist large language models, trained to do a specific task well and access a circumscribed dataset, rather than resource-intensive generalist large language models, which sometimes generate spectacular if unreliable output.
What do you mean? most complicated parts of the gpu driver are in userland and handled by Mesa or equivalent. Kernel drivers expose a standard interface(DRM) which userspace drivers use to upload compiled gpu programs and manage gpu memory. Also, linux is not tied to gcc extensions, it can be compiled with llvm(clang) for a long time now.
Speaking as someone that bought into it, WinRT was kind of the .NET idea before they went with a Java clone (Ext-VOS), they didn't fail only on features, they failed on how it was managed.

From the forced rewrites across Windows 8, 8.1 and 10, as the platform was maturing, the deprecation of C++/CX, replaced by less capable C++/WinRT (now in maintainance, while they are having fun in Rust/WinRT), deprecation of .NET Native without parity in Native AOT, no designer, and plenty of other broken stuff.

It was for this that WinDev kind of sabotaged Longhorn efforts, thanks very much.

Meanwhile Google shows what happens when everyone pushes into the same direction, even if it takes some growing pains (with lots of cash) to get there.
>Most users just want something that gets things done with as little friction as possible.

It's funny to read this as someone that always dreads having to get a new phone, or install some proprietary app, or reinstall a Windows VM, or sign up to some service, exactly because I know how much friction is going to be deliberately put in my way from every party involved.

"No you can't just change your phone's service provider", "No you can't unlock your phone's bootloader", "No you can't just boot into a new copy of the OS without signing into a bunch of things", "No you can't install this Windows image on a device without a trusted platform module", "No you can't just install a program from the web", "No you can't just look at all the files on your phone", "No you can't just have an app sync photos from the SD card", "No you can't create a login without giving us your phone number", "No you can't opt out of our 'telemetry'", "No you can't view the video you're paying for without the right OS/browser/monitor/cable".

Coming soon: "No you can't view the URL of the page you're on", "No you can't install an ad-blocker", "No you can't access this site without an attested, locked-down OS-browser stack", "No you can't install a different OS on this PC", "No you can't use a local, unlicensed generative AI model".

I think it's time we reframed the discussion and stopped dumbing users down and pretending that extremely anti-user behaviour is "user-friendly". Using technology used to be challenging because the hardware and software were still being bootstrapped to a point where it was fast, simple and bug-free to use. Now the experience of using technology is to have to navigate some corporate bureaucracy in every direction, which is totally independent of tech limitations.
Not having to worry about closing tags can be solved in numerous other ways without having to invent a new language. And strictly speaking, Haml doesn't actually remove closing tags - it replaces them with whitespace defined structure. This introduces new classes of problems. Like having to deal with when it is unclear when the whitespace is part of the structure versus when it is part of the content. There is a reason why the Haml reference has a section on this.

Then there's all the other syntax that needs to be crammed in to make the language do what you want. HTML doesn't have lots of special characters strewn about the place that have meaning, but Haml does. You now have to understand HTML, Haml and how Haml is turned into HTML. That's a lot more complexity than sticking close to HTML.

It seems like a lot of unnecessary work to use Haml (and impose it on other people through code) if your reasons for using Haml are purely superficial.
This is true. I've tried to read some gnu code in the past (tar) and patch another (df) and... ran away instead. It's doable, but so messy I'd rather write my own very specific command, than try improving one of the old-style gnu ones.
But there are tickets that are only valid for certain providers?
It's REAL a fraud!
Although it's worth remembering the UK is still a popular place is "disappear" since it's doesn't have an overarching ID system like most Western countries, and the UK doesn't track people anywhere near as much as it's neighbours.
> The relationship trend was observed in the WHO regions except in SEARO

So basically the trend was observed everywhere except the region which contains pretty much the only country where a significant population is historically vegetarian due to culture and religion.
hard to recommend a place that is better than another because surveillance has unequal distribution so time is never in your favor.

Countries that have progressed rapidly in their digital transformation are also (generally speaking) further down in their transformation into a "control society".

So wherever you go (and unless you chose to start from scratch living on your own farm) it's impossible to escape for very long.

Another thing to take into account, is whether legislation has also transformed itself in favor of civil rights during the same time. But can only happen as a second step, and much slower (law when applied needs precedent). Odds that civil rights transform equally fast and fair immediately are nil (and in favor of more tech and more surveillance).

To "get out" (if there is such a thing) one would have to move to a place that is far behind in that regard (and even here YMMV because some poor countries transform into control societies ling before they are digitally transformed).
Britain feels simultaneously strict and lawless. It's strange, but it's hard to imagine things turning out any other way in this country.
> Large crimes are being ignored and instead non-crimes (or minor-crimes) are blown out of proportion

As always: by whom? And the answer: the press.

The UK media are pro-Tory and far-right to such an extent that they quietly ignore all this massive corruption in favor of slamming alternatives down at every opportunity. The only exception recently has been the Mirror's dogged "partygate" series.
Craigslist or Facebook marketplace. Some fool like me would be happy for a used speed queen to fix and keep forever. It's 20 items down my household Todo list but will never get done since my 20 year old top loader just keeps working.
> I don't know what your point is here. Do you spend a lot of time in your career thinking about hardening your containers against kernel CVEs?

Yes, I literally led a team of people at a FAANG doing this.

You're saying the easiest way to escape a container is a vulnerability normally priced over 1 million USD. I'm saying the easiest way is through one of the million side channels.
The fact that you are comparing a fumble of a mug and rear-ending someone suggests to me that you have internalised that implication that RTCs "just happen".

There's certain behaviour that leads to rear-ending someone - typically lack of awareness/attentiveness rather than it being a momentary loss of control. It's predictable that e.g. someone using a phone whilst driving will be far more likely to cause a RTC whereas the coffee mug dropping isn't really associated with any particular behaviour.

What I mean is that mug dropping is not really something that we can do anything about, but ensuring that drivers obey traffic laws and are attentive is definitely something that can be influenced (e.g. by police or by public messaging).
Don’t underestimate the difficulty of semiconductor manufacturing. It’s not that they’re trying to implement a fixed target - the technology has been exponentially advancing for the last 50 years.
A quick look inside the HSTS file
Also York (popular destination, middle of the east coast main line but good connectivity to stations west (Leeds, Manchester, …) & elsewhere, with both through-trains and those that start/terminate there): https://github.com/anisotropi4/kingfisher/blob/main/image/Y/...

Not as busy as any of the London terminals, but a key station for many travellers.
Much of it is only insane to foreigners. Like, despite the supposed "huge fear of immigrants", the UK has a way more permissive immigration system than places like the US or Denmark, and is generally considered a more open society than it's European neighbours.
The Incubator for AI (https://ai.gov.uk/) | AI Engineers (various roles) | UK | Full-time

i.AI is a new team set up by the UK government, with the mission to help departments harness the potential of AI to improve lives and the delivery of public services.

We're looking for engineers and data scientists/devs who want to build products and infrastructure to help deliver real good with AI.

All positions do require UK residency and security clearance (sorry folks, we can't do remote)

Apply here: https://ai.gov.uk/join/

Email ai@no10.gov.uk with any questions
they're already doing that. This wouldn't change that either way.
Not to sound like snark, but where does the money even come from? I feel like you've ruled out either donors or investors, which really makes me confused over what's left.
Javascript (for all its warts) does in many ways seem to be converging on a certainly local maximum for ergonomic language design. Perhaps this is because it is used so much in the 'wild west' of browser programming? Where things can move quickly, with polyfill for backwards compatibility (a modern marvel to my eyes, being able to use new language features on old platforms!)
It's just silly. I wrote an "imagine if we could trust the kernel as a boundary" and I get 100 posts about the same misconceptions. If people read into my post that I think a Rust kernel would solve all problems, perhaps I was overly simplistic with my language.
where have you been the past 40+ years?

https://en.wikipedia.org/wiki/Socialist_market_economy
You'd have to try pretty hard to do that, because you won't be able to work, have a bank account, rent, or purchase a house.

We don't have an ID system but we have a lot of ID requirements.
This will make the capitalist market in China invest into chipmaking, not just the government. That is a very different beast.
My experience being controlled as foreigner for various kinds of reasons kind of differs.
Or anyone, including ourselves, if you look beyond the short term "they can't make fast chips for a few years". Even the elderly folk currently calling these shots will likely still be alive when the consequences materialise

Or maybe I'm overlooking something, I'm no macroeconomic strategist, just someone who was taught in high school that we learned from previous walled economies
The entire excerpt is a low-quality strawman.

Start with why housing isn’t a commodity; and why it can’t be produced on the cheap by slave-labor.
America's respect for free market principles here doesn't amuse you too?
I deeply hate the "Welcome to the UK border" signs at airports. More than most countries, it's a first impression of petty authoritarianism.
Wow! I'm impressed. It wouldn't surprise me if you need medical and psychological help after this feat!
Researchers have identified the enzyme that gives urine its yellow hue
If you make a contribution to GPL, the entirety of your contribution must be GPL. If you're using some internal library, you must make your library GPL. If your library is GPL, anything that depends on it must be GPL.

For-profit companies don't like sharing and making the community better if it doesn't make them 10x richer, so they don't like GPL.
I never understood the reason behind these messages, is it because they think everyone is dumb ?
In continental europe messages are meant to forbid stuff, it is rare to see a "mind the gap" message.
OK, I apologize if I was coming off as glib or condescending. I will take your input into consideration.

I'm not looking to argue, I was just annoyed that I was getting so many of the same comments. It's too early for all of this negativity.

If you want to discuss this via an avenue that is not HN I would be open to it, I'm not looking to make enemies here, I'd rather have an earnest conversation with a colleague rather than jumping down their throats because they caught me in the middle of an annoying conversation.
Thank you for making this right! I didn’t think there was any malice in it and it’s nice to know it was a simple mistake.

I’ve also already unassigned my unneeded address and I’m still interested in using fly for some things in the future.
coreutils is 33 years old and going strong.

https://en.wikipedia.org/wiki/GNU_Core_Utilities#History

This one might have been around for 10 years, but it's disingenuous to claim it is as extensive, feature-full and tested as the real thing.
York is a good example of how building high-ish speed railways that actually take people somewhere they want to go, leads to people using those railways.

Look at the way the plots taper off to the north and south of York; this isn't just people shuttling to and from London, this is ordinary commuters and rail travellers using the railway as a decent mode of transportation.

I wish the government had the gumption to recognize this and respond appropriately.
There is no medical problem and there is no other party; as a man, I'm not capable of making children, no matter how much of a tax penalty you apply to me.
>> And racism is rising rapidly
>> To be frank, in many areas it's a real shithole country

Thanks to Trump, the term "shithole country" has now been termed as a dogwhistle for racists, so I'm genuinely curious as to what you mean when you're calling certain parts of England a shithole?