skysight-inc/HackerNews huggingface dataset:
> The US (and Europe I'm guessing) banned human germ-line engineering in the 1970s, and so far the tech has stayed stopped worldwide.

And so far as we know the tech has stayed stopped worldwide. (With at least one exception, as you point out. But that exception was, apparently, not officially approved.)

Do you really think North Korea won't do this if they think they see some benefit?
7800x3d maxes out around 80 watts (has to be gentle to the vcache), the 14900k can go up to 300w (out of box, though Intel is issuing a new bios to limit that), and they trade blows in gaming.

I would say that's a bit more than process efficiency?

https://youtu.be/2MvvCr-thM8?t=423
Global Energy Storage Market Records Biggest Jump Yet
> Social media is absolutely lousy with AI-powered fraud of varying degrees of sophistication.

has been for years mon ami. i remember when they started talking about GPT-2 here, and then seeing a sea-change in places like reddit and quora

quite visible on HN, esp. in certain threads like those involving brands that market heavily, or discussions of particular countries and politics.
Looking around Kraftcloud, it looks like fly.io but vocabulary is lot simpler and I can totally see it as a viable upcoming PaaS player.

Seems like you can run state full workloads too.
In other news, 63% of Americans should stop watching so many sci-fi movies.
The Homeowners' Rebellion
For those that haven't seen it, there's a a great New Yorker cover called "View of the World from 9th Avenue" that pokes fun at this. Here's a close-up of the image: https://saulsteinbergfoundation.org/wp-content/uploads/2016/...

And an article about it: https://saulsteinbergfoundation.org/essay/view-of-the-world-...
Thanks, that one also uses the correct company name, "Booking.com" (the parent company is "Booking Group"), so the headline isn't confusing. This headline makes it sound like a the EU is "designating" a definition of a noun.

It'd be like if a headline said "EU Sues Privacy" when referring to Privacy.COM.
AWS CEO Stepping Down
> What the EU – and everyone else – needs to be doing is to develop, or encourage the development of, plastics which can do the job of existing materials but which will break down in the environment in a matter of weeks or months, like paper and cardboard.

This would be amazing but there is a possibility that it's actually impossible. There is nothing magical about the environment. Paper and cardboard are physically degraded by moisture and chemically by fungus. The reason plastics are popular is because they don't do that. The more degradable you make a plastic in the environment, the less desirable it's properties are for foodstuffs.
My favorite recent insult to that was seeing that Ford recently changed their old "Ford Fusion retired" page.

https://www.ford.com/cars/fusion/

The "Explore All Sedans" buttons goes to a page entitled... "The Family of CUVs and SUVs".

All I want is a reasonably good sedan and we can't get that anymore. I'm half debating trying to track down a Ford Police Responder/Special Service Plug-In when they start coming off-duty in a few years just to keep a Fusion alive.
I've sold multi-year and perpetual EE licenses for this exact reason -- to reduce risk of eventually losing EE features if Keygen LLC goes under and is unable to renew EE licenses. So in this case, if Keygen LLC goes under, they still have a perpetual EE license that will allow them to use existing EE features. But this is something I've been thinking about lately, and something my customers have been talking about. I want to come up with a better answer other than "well, pay me for a perpetual license and we'll remove that risk."

Maybe some kind of clause for a "Change License" in case Keygen LLC goes under, e.g. we go from ELv2 to Apache 2.0 if that happens. I'm not really sure what that'd look like right now, but I'll keep thinking on this and hopefully come up with a good answer eventually.

Outside of that, nothing is really stopping somebody from forking Keygen and reimplementing the EE features 'in-spirit' under a new code path, especially if Keygen LLC has gone bust. They just can't remove or copy the existing EE features verbatim.
>Easy, my bank account is still full.

To be fair, it's non-trivial to convert hacked bank credentials to actual cash, due to anti-fraud measures, KYC rules, and reversibility built into the finance system. A better indicator would be $1000 worth of BTC on an unencrypted wallet not being hacked.
EU Digital Markets Act (English Full Text)
I thought that’s what fly.io is, although I’m not familiar with it, am I missing something?
Police department recommendations are often wrong, and often based on either poor information about the domain the advice is being given in or actively-promoted (by police leadership) disinformation.

Police agencies aren't systematic domain experts except in the application of force to obtain compliance, as well as not having an interest in accurate advice.
Tesla spending ad money to influence shareholders re Elon Musk's $55B payday
It's an incidental security boundary because CGroups happen to isolate the process fairly well.
as the meme goes "always has been"

i remember seeing the change when GPT-2 was announced
I’ve been behind too many humans who feel they need to brake at every thought that comes into to their head while driving.

Artificial Intelligence will become Artificial Stupidity if we are not careful.
>> and then stream the actual recording (more computational resources for better results) over the local network to a central hub.

This frustrates me. I ran Dragon Dictate on a 200MHz PC in the 1990s. Now that wasn't top quality, but it should have been good enough for voice assistants. I expect at least that quality on-device with an R-Pi today if not better.

IMHO the end game is on-device speech recognition and anything streaming audio somewhere else for processing is delaying this result.
Python's facilities for calling subprocesses are pretty inconvenient compared to bash IMO. It defaults to binary output instead of UTF-8 so I almost always have to set an option for that. I wind up having to define threads in order to run programs in the background and do anything with their output in real time, which has an awkward syntax. The APIs for checking the exit code vs raising an error are pretty non-obvious and I have to look them up every time. And I always wind up having to write some boilerplate code to strip whitespace from the end of each line and filter out empty lines, like p.stdout.rstrip().split('\n') which can be subtly incorrect depending on what program I'm invoking.
Before launching, GPT-4o broke records on chatbot leaderboard under secret name
It seems to me that most complains can be simply solved by letting it run macOS.
To each his own but part of why the article is great is that it dunks on the Disney canon for the good of the force. Where once these and other similar franchises inspired thoughtful and detailed discussions within fandom, what we have now seems like thoughtless corporatized fare and we should not waste time attaching more meaning to it than it deserves
Paradoxes of DevSecOps at the Seed Round
Tech companies are flocking to the Middle East
Every bug needs fixing. Some are just more profitable to fix.
> I see why HN types might love it, but HN types are literally the elite in our society too.

Given it's about the Roman Empire/Republic… "How often do men think about ancient Rome? Quite frequently, it seems.":

* https://www.washingtonpost.com/lifestyle/2023/09/14/roman-em...

* https://www.cbsnews.com/news/the-roman-empire-tiktok-trend-w...

:)

Besides, it stars Kylo Ren.
You asked HN for a payments provider / accounting platform. You're in the global top 1%.
I guess this came to be due to the poor original security model of classic OSs, which led to prolification of viruses and complex management of shared resources. Users, groups and access flags are not enough to manage security of a system.

Linux tried to fix that with namespaces and it turned out to be more or less successful, but Linux is not an OS, it's just a kernel, and it's up to real OSs built atop Linux to use namespaces as an implementation detail for real application isolation.

One way to do that is OCI-containers, the other way is Flatpak. Neither of those is not a proper OS yet, but you could call Kubernetes an operating system which uses containers as means for application and resource isolation. Naturally that means Kubernetes is a complex beast, but that's what it takes to provide what users expect from an OS.

Android also comes to mind, they managed to isolate applications between each other quite safely.
We looked into 217 YC founders in Southeast Asia
Recently, I led research at UpYouth on analyzing the batch data of Y Combinator in Southeast Asia from 2013 to 2023. This includes the analysis of 217 founders and 111 startups enlisted to YC in the region.

The facts were interesting: 60% founders went to elite universities; 70% founders have prior work experience in product development or growth; only less than 30% were first-time founders.
Agree with epr's definition of a unikernel (and no, no mental decline on your part, this isn't always well defined).

First off, a unikernel is a virtual machine, albeit a pretty specialized one. They're are often based on modular operating systems (e.g., Unikraft), in order to be able to easily pick the OS modules needed for each application, at compile time. You can think of it as a VM that has a say NGINX-specific distro, all the way down to the OS kernel modules.

VMs provide what's called hardware-level isolation, running on top of a hypervisor like KVM, Xen or Hyper-V. Wasm runs higher up the stack, in user-space, and provides what's called language-level isolation (i.e., you could even create a wasm unikernel, that is, a specialized VM that inside runs wasm (eg, see https://docs.kraft.cloud/guides/wazero/). Generally speaking, the higher you go up the stack, the more code you're running and the higher the chances of a vulnerability.
Clojure: Structured Concurrency and Scoped Values
Cliniko | Operations Engineer | Remote | Full-time | 30 hour work week

We are looking for an amazing Operations Engineer to join the team at Cliniko (https://www.cliniko.com/) in any timezone. We're keen to find a talented Operations Engineer who works well autonomously and is passionate about what they do. They should be experienced in infrastructure automation, specifically in cloud environments, but there's no requirement for how much experience with any specific technologies. We want someone that is looking to do their best work, in a company that will support them to do so.

Cliniko is practice management software that makes life easy for allied health professionals by handling appointment scheduling, storing treatment notes, running video consultations, and much more. The software is used globally by 100,000+ people every day.

You'll spend your time improving Cliniko. Things you might be doing include:

* Ensuring our infrastructure remains compliant with various regional and global requirements.

* Measuring and improving Cliniko's reliability.

* Making and implementing recommendations on performance improvements.

* Working with infrastructure in multiple regions around the world.

* Improving logging, monitoring, and alerts (observability).

* Improving deployment processes (containers to Kubernetes).

* Optimising spend.

* Anything else you think needs doing.

Our goal is to do right by our customers and you'll be working on making Cliniko better for them.

You can read more about the job, how we work, and the application process by heading here: https://apply.workable.com/cliniko/j/B9CBCCF450/
The AI woman's voice is far too breathy and emotive. I instantly hate it and don't want to hear it. The AI has also copied one of my personal pet peeves, which is dropping or swallowing d's and t's from certain words, like "didn't" to "di-unt" and "important" to "impor-unt"--which I find to be a new unbearable laziness spreading amongst younger Americans today. There are TWO T's in important goddammit (I'll die on that hill).

I hate this voice, it will just overprint everyone's voice now with Silicon Valley's annoying "Valley-girl-lite" accent.
Containers are an OS feature, though. The OS is fulfilling the promise of environment isolation with containers.
Something one might like as a continuation of the article is digital sundials. Apart from types listed on wikipedia, there are 3D-printed versions etc.
AWS CEO Adam Selipsky steps down
Oh, you remember those little games that your mom played on facebook/tic tok that asked her "Her favorite", sorry she already trained the AI who she was.

I only say this sort of jokingly. Three out of four of my parents/in laws are questionably literate on the internet. It wouldn't take much of a "me bot" for them to start telling it the stories of our childhood and then that information is out there.
Interesting, I was reading some comments from Japanese users and they said the Japanese voice sounds like a (very good N1 level) foreigner speaking Japanese.
No problems with the attached caps so far. Not sure what these people are doing really that they have issues drinking from these bottles.
> Interop with other truffle implementations such as java, python, javascript, llvm, and more.

Maybe "interop" is too weak a phrase for the incredibly powerful cross-language tooling that is allowed with GraalVM (ISLISP implementated on GraalVM's Truffle framework, ref OP link). For example of what is really possible, see "Ten Things You Can Do with GraalVM (2018)" [0][1]

[0] https://gist.github.com/chrisseaton/535e0e80ea19803d5529c623...

[1] https://news.ycombinator.com/item?id=36723587
That's not what "static" means
More tech won’t solve it. Areas, either physical or logical, with no or low tech might help.
Compared to my parents, we're paying double for new vehicles (inf adj).

https://www.thedrive.com/news/34333/heres-how-much-the-ford-...

This household lives in a 4-income economy. At modern price-points: Our used vehicles would be worn to the rims before we could save for and purchase a new vehicle outright.
As I mentioned in another comment, the linux kernel feature (user namespaces) that enables "rootless" containers was released in February 2013, and Docker was released soon after in March of that year. For whatever reason, they haven't made it a priority to make rootless the default, although it is technically doable. If you are annoyed by this, I'd suggest checking out podman, which has done a lot of work to be basically a drop in replacement with a similar workflow to docker.
I have a few old domains I registered in the late 90s, and some of them still have the mailto with my email, some I rarely get any spam, and others it's dozens a day. SpamAssassin does a great job of caching the spam.
One day they will be as cool as Linux users:

https://m.youtube.com/watch?v=Fow7iUaKrq4
A Dockerfile is just a file with a bunch of commands to execute and get a working "computer". https://github.com/combust-labs/firebuild is fairly aged translation of the Dockerfile to a VM rootfs.
in BASIC and floating point, no less.
Engineers solve mystery in electrochemical ozone production
Can someone please recommend a decent platform which is not Booking or AirBnb for Southeast Asia?
I don't go on booking.com by virtue of how good it is, I go on booking.com because every hotel has a page there

It's a gateway between businesses and consumers, got popular because they got on the market at the right time, is ingrained because their users have reached critical mass and are giving it momentum, so of course it needs to be regulated as such
And yet the majority of the sibling comments are happily chatting about consuming content. Is it a generational thing?
IIRC there was one which was multiplayer pre Internet. You called in to a BBS like server with banks of modems. (I think there were 20 players or something like that in a game.)
Memory de-dup is computationally expensive, and KSM hitrate is generally much worse than people tend to expect - not to mention that it comes with its own security issues. I agree that the security tradeoffs need to be taken seriously but the realworld performance/efficiency considerations are definitely not negligeable at scale.

There are also significant operational concerns. With containers you can just have your CI/CD system spit out a new signed image every N days and do fairly seamless A/B rollouts. With VMs that's a lot harder. You may be able to emulate some of this by building some sort of static microvm, but there's a LOT of complexity you'll need to handle (e.g. networking config, OS updates, debugging access) that is going to be some combination of flaky and hard to manage.

I by no means disagree with the security points but people are overstating the case for replacing containers with VMs in these replies.
I want Richard Dawkins or David Attenborough to narrate my code for me.
Ah great! Still don’t know what the future of Dart/Flutter is after Google fired large parts of those teams though?
Singing is fun, I'd probably give in after a while.
Biden hits Chinese electric cars and solar cells with higher tariffs
my mobile banking app is only good for looking up the balance, which i really dont need to do that often. for anything more complicated using the phone is just irritating and i more frequently turn to my desktop or laptop. moreover if banking is so significant to you, and you hold alot of funds, perhaps you should really then think about having a secure isolated banking device.
Get power from humans combined with solar power sounds like the matrix.
The main advantage in my use case is in fact isolation (network and volumes) and a well defined API enabling management of those containers in production (not k8s, a tiny subnet of that perhaps).

The isolation could be achieved using namespaces directly. But the API, tooling and registry add a lot of value that would otherwise require a lot of development.

Also last time I looked hypervisors aren't possible on all cloud vendors, unless you have a bare metal server. This matters in my case. Maybe it has changed in the past 3 years.

When docker fits it's great. Same can be said of k8s, where there are a whole bunch of additional benefits.

Swings and roundabouts.
> I thought you can pay for access.

Or I could just buy an AirTag on my own.

> But to disincentivize theft, any device would have to be built in such a way that swapping the electronics or discarding that tracking module makes the device you were protecting worthless.

Not really. It just needs to be so difficult to remove without a key that thieves physically cannot remove / disable the tag without threatening the stability of the bike, car or whatever.

Doesn't need to be perfect, all it needs to do is provide sufficient survival time against your average crackhead.
LOL haha can I steal that?
In web development I had never experienced an issue with the commonly used softwares
> SQL, as hard as folks try, it's not going away.

I love SQL. The only thing that can become a pain is switching between dialects, especially on an older DB version. I was stuck on MySQL 5.7 a few years ago at a previous company, and not having access to window functions or CTE was just a headache. We started a new product and I made sure our new DB was MySQL 8 or whatever was recent at the time and my queries were so much easier to write.

The quality of life improvements to SQL in various DBs has been made it an absolute joy.
I was going to comment explaining the concept of delivery costs but I got distracted by the part where you describe $9 as nearly $15. Nearest dollar I’d be fine with. Nearest $5 or $10 I can imagine. Nearest $15 doesn’t make any sense. $9 is nearly $10 not $15. Why not go one step further? $15 is nearly $20. You basically paid $20 for 2 burritos. That doesn’t seem very smart of you.
The 125ms is using Linux. Using a unikernel and tweaking Firecracker a bit (on KraftCloud) we can get, for example, 20 millis cold starts for NGINX, and have features on the way to reduce this further.
> Greg Brockman needs no introduction.

Even if that were true¹, it doesn’t mean everyone would know their HN user name.

¹ Greg may be well known within a select group of people but that’s way smaller than even users of ChatGPT.
Hey there! I am Dhruv Agarwal, one of the co-founders of MiddlewareHQ. Today, we’re open sourcing the core of our product.

Being both an engineer and an engineering manager in the last decade I observed that builders are stuck in slightly sized orgs (>40 engineers) and leaders have a meek sense of the blockers.
So, I observed 2 types of leaders: micro-managers or gut feeling wingers.

The end result in both cases are unhappy and stuck developers.
Hence, we built Middleware.

This version offers DORA metrics out of the box to help any engineering team get started on tracking their delivery pipeline health (both in speed and quality).

Engineering productivity is a complex topic and a crucial decision is to pick a framework which is non-monitoring, non-gameable.

DORA metrics fits well right in and being open source Middleware makes it easy to start within your infra/env securely.

Looking forward to your feedback and thoughts!
Theft is a concern where I live in Brooklyn but its an order of magnitude less likely that I lose something to theft vs me misplacing it
React has absolutely nothing to do with the history stack. Sure there are routing libraries that build on react that do, but... Not react.

But yes, obviously it's some bad javascript code.
Depending on your container runtime (Kata container or gVisor), it's a exceptionally strong security boundary too.
This reminds me of my fond memories of migrating from perforce to git and getting to delete similar perforce style comments at the top of every file. So satisfying to clean that up.
Amazon Web Services CEO Adam Selipsky to Step Down
Tangent but I don’t really agree with the premise of the quote. Being cloaked wouldn’t need to imply no light enters the ship. A sufficiently advanced ship wouldn’t need to “bend” incoming light. Instead it could even absorb every single incidental photon and particle and then actively emit one with the expected behavior as if there was no object in that region of space. E.g. absorb photon on one side, emit one photon on the other side.
dude, that’s freaking nuts. It’s amazing and terrifying at the same time.
> The main purpose of "problems", and especially of homework, was a show of social submission, designed to persuade the teachers to reveal the next secret.

Of all the weird misunderstandings kids have about the world, this might be the weirdest I've ever heard.

I'm kinda fascinated, do you recall at what age you believed this? What was the context you grew up in (country, culture, school). Do you recall where the seed of this idea got planted?
Yeah, but that's not an incidental property of *namespaces* (of which cgroups is only one isolation axis), that was the requirement when namespaces were designed.
I have a strange problem: I have always written in a manner that now leads people to think I am a LLM.

It has been so bad, I even considered injecting misspelling and incorrect grammar and bad punctuation into my prose to prove my words are mine.